Yunzheng 42thcoder

Dear Rubyists,

I just lost a contract because of my code in a Rails project.

The specific code in question is related to a "posting a comment" feature. Here are the details:

In this project, "posting a comment" does not simply entail inserting a row into the database. It involves a procedure to yes, insert a row, but also detect its language, check for spam, send emails, and "share" it to Twitter and Facebook. I believe this algorithm should be encapsulated. I do not believe it belongs in a controller or a model. I do not believe Active Record callbacks should be used.

The "senior developer", whom is the stake holder's right hand man, said this:

Routes

小心地使用 Match（Rails 3 已实现）

Rails 3 提供了 match 方法供我们自定义 routes，然而我们要小心使用它以避免“跨站脚本攻击”（XSS Attack）。比如像这样的 routes：

注：（r3 代表 Rails 3，r4 代表 Rails 4）

# routes.rb

#Simple Authentication with Bcrypt

This tutorial is for adding authentication to a vanilla Ruby on Rails app using Bcrypt and has_secure_password.

The steps below are based on Ryan Bates's approach from Railscast #250 Authentication from Scratch (revised).

You can see the final source code here: repo. I began with a stock rails app using rails new gif_vault

##Steps

	module Order
	module Ranking
	def self.included(base)
	base.extend(ClassMethods)
	end

	def update_r_ranking
	t = self
	t.r_ranking = Topic.calculate_ranking(t.pushes_count, t.created_at)
	t.save(:validate => false)

	/* 后端数据 */
	var data = {
	"10;20;30": {
	price: 5,
	count: 1
	},
	"10;20;31": {
	price: 10,
	count: 2
	},

	require 'benchmark/ips'

	h = { foo: :bar }

	Benchmark.ips do \|r\|
	r.report('#[]') { h[:foo] }
	r.report('#fetch') { h.fetch(:foo) }
	end

	class Attachment < ActiveRecord::Base
	mount_uploader :attachment, AttachmentUploader

	# Associations

	belongs_to :attached_item, polymorphic: true

	# Validations

	validates_presence_of :attachment

	# MODEL

	class Case < ActiveRecord::Base
	include Eventable

	has_many :tasks

	concerning :Assignment do
	def assign_to(new_owner:, details:)
	transaction do

	<?xml version="1.0" encoding="UTF-8" ?>
	<opml version="1.0">
	<head>
	<title>寸志 subscriptions in Digg Reader</title>
	</head>
	<body>
	<outline text="Framer Blog" title="Framer Blog" type="rss" xmlUrl="http://framerjs.tumblr.com/rss" htmlUrl="http://framerjs.tumblr.com/" />
	<outline text="粉丝日志" title="粉丝日志" type="rss" xmlUrl="http://blog.fens.me/feed/" htmlUrl="http://blog.fens.me" />
	<outline text="AngularJS" title="AngularJS" type="rss" xmlUrl="http://blog.angularjs.org/feeds/posts/default" htmlUrl="http://blog.angularjs.org/" />
	<outline text="blog.izs.me" title="blog.izs.me" type="rss" xmlUrl="http://blog.izs.me/rss" htmlUrl="http://blog.izs.me/" />