Rails' Insecure Defaults - Code Climate Blog - http://blog.codeclimate.com/blog...