Categories
Rails

Ruby On Rails: security

Making sure passwords and other form data are hidden. Hidden meaning not showing up on the log file.

Go inside the config/application.rb file, and add the following line (if not there):


# Configure sensitive parameters which will be filtered from the log file.
config.filter_parameters += [:password]

end

This will ensure your sensitive password form field don’t end up showing in the log file

Leave a Reply

Your email address will not be published. Required fields are marked *