Rails Security Cheatsheet (owasp.org)

It's good to see all of this security related information in once place, it can act as a nice checklist before going live, or even thinking about it :) (but many times I prefer the risky way)