Owasp Ruby on Rails and Friends Security Guide - View it on GitHub