懒汉只贴链接: http://www.quarkruby.com/2007/9/20/ruby-on-rails-security-guide http://nubyonrails.com/articles/massive-list-of-rails-development-tips