How I Audit a Legacy Rails Codebase in the First Week
My legacy Rails app playbook. After 50+ engagements, here's the exact process, tools, and stakeholder questions I use in week one.
Posts tagged: security
-
-
Rails default_scope: Why You Should Never Use It
`default_scope` quietly breaks `Model.all`, corrupts scope chaining, bleeds into associations, and can leak data in multi-tenant apps. Here's why it's dangerous and what to use instead.
