How I Audit a Legacy Rails Codebase in the First Week
My Rails codebase audit process: stakeholder interviews before code, Gemfile and schema before any tools, and a single-page triage as the deliverable.
Posts tagged: security
-
-
Rails default_scope: Why You Should Never Use It
`default_scope` quietly breaks `Model.all`, corrupts scope chaining, bleeds into associations, and can leak data in multi-tenant apps. Here's why it's dangerous and what to use instead.
