Thomas Hanley tjhanley

Cheat Sheets are greate but they are not a substitute for learning the framework and reading the documentation as we most certainly have not covered every potential example here. Please refer to the Rails Command Line Docs for more information.

Command Line Generator Info

Reference

You can get all of this information on the command line.

rails generate with no generator name will output a list of all available generators and some information about global options. rails generate GENERATOR --help will list the options that can be passed to the specified generator.

Content Security Policy (CSP)

CSP limits our site from making requests to other sites, controls what resources the page is allowed to load. It limits the damage even if malicious code is running in a user's browser within our site's context.

Common examples

Content-Security-Policy: default-src ‘self’ Prevents loading resources from other domains. Prevents inline scripts, such as <script>alert('hello')</script>.
Content-Security-Policy: default-src ‘self’ *.trusted.com

	#!/usr/bin/env python
	# Quick and dirty demonstration of CVE-2014-0160 by
	# Jared Stafford ([email protected])
	# Modified so that it finds cookies

	import sys
	import struct
	import socket
	import time
	import select

	mail_address = ''
	password = ''

	from selenium import webdriver

	UA = 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0'
	PHANTOMJS_ARG = {'phantomjs.page.settings.userAgent': UA}
	driver = webdriver.PhantomJS(desired_capabilities=PHANTOMJS_ARG)

	url = 'https://www.google.com/accounts/Login?hl=ja&continue=http://www.google.co.jp/'

	http://stackoverflow.com/questions/22667401/postgres-json-data-type-rails-query
	http://stackoverflow.com/questions/40702813/query-on-postgres-json-array-field-in-rails

	#payload: [{"kind"=>"person"}]
	Segment.where("payload @> ?", [{kind: "person"}].to_json)

	#data: {"interest"=>["music", "movies", "programming"]}
	Segment.where("data @> ?", {"interest": ["music", "movies", "programming"]}.to_json)
	Segment.where("data #>> '{interest, 1}' = 'movies' ")
	Segment.where("jsonb_array_length(data->'interest') > 1")