Rails 8 introduces Parameters#expect for safer parameter handling
Rails 8 adds `Parameters#expect` to prevent parameter manipulation attacks and provide clearer error handling when required parameters are missing or malformed.
All Posts
HTTP Caching for Rails APIs: The Missing Performance Layer
Most Rails APIs ignore HTTP caching entirely, missing out on massive performance gains. Learn practical caching strategies that can reduce server load by 90%.
Why your Rails performance fixes don't work (and how to find ones that do)
Stop wasting time optimizing code that doesn't matter. Learn how to use the Pareto Principle and profiling tools to find the 20% of your Rails code causing 80% of performance...
Scaling Rails with PostgreSQL Read Replicas: Part 3 - Production Excellence
Master production deployment strategies, monitoring, performance optimization, and failure handling for Rails applications using PostgreSQL read replicas.
Scaling Rails with PostgreSQL Read Replicas: Part 2 - Advanced Patterns and Gotchas
Deep dive into handling replication lag, implementing automatic connection switching, and solving real-world challenges with read replicas in Rails applications.
Scaling Rails with PostgreSQL Read Replicas: Part 1 - Understanding the Basics
Learn when and why to use read replicas in Rails applications, understand the architecture, and implement basic read/write splitting with real-world examples.
PostgreSQL 17's MERGE with RETURNING: The Game-Changer Rails Developers Have Been Waiting For
PostgreSQL 17 introduces RETURNING support to the MERGE statement, solving a long-standing limitation that forced developers to choose between atomic upserts and knowing what actually happened to their data.
Rails with_connection: The better way to manage database connections
Rails 7.2 introduced `with_connection` for better database connection management. Learn why you should use it instead of the traditional `connection` method.
Rails 7.1 handles long auto-generated index names with a limit
Rails 7.1 adds a limit of 62 bytes on auto-generated index names. There is also a bonus deep dive at the end.
The target _blank vulnerability
Are you using target='_blank' in your links? If you are, you should be using rel='noopener noreferrer' with it.