Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I really enjoy Sinatra and am indeed using it for REST style API hosting, but the counter argument might be all the security stuff that is built into the Rails routes/controllers. this might be a great case for a stripped down rails app as opposed to a Sinatra app.


I thought most of the security in Rails is provided by the rack-security middleware? Or am I forgetting something which Rails provides here?


Escaping everything by default to avoid XSS attacks. that's a nice feature to have.


This can be done in Sinatra: http://www.sinatrarb.com/faq.html#auto_escape_html




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: