Testing Rails vulnerabilities