Cognizant interview question

Security on applications built on RoR