Running Brakeman
Brakeman is a Rails Security Scanner. To be exact, it is a “static analysis security scanner for Ruby on Rails”. Amongst others, it covers the OWASP Ruby on Rails Cheatsheet
my unix commands to run brakeman:
The scanner found a couple of interesting issues: