RoR Security Best Practices.
I have developed a RoR application, which does not have any DB but make use of session and cookies. Now I would like to add some kind of security stuffs on my application. I have done CSRF, XSS, adding protection flags on cookies and filtering of parameters. Any other suggestions will be useful! 
RoR Security Best Practices.
===

I have developed a RoR application, which does not have any DB but make use of session and cookies. Now I would like to add some kind of security stuffs on my application. I have done CSRF, XSS, adding protection flags on cookies and filtering of parameters. Any other suggestions will be useful! 