This Ruby on Rails security guide pulls together several excellent sources on securing Rails applications. It is broken down by category (authentication, model, controller etc.) so it makes for a great reference.

via Ruby Inside