It is easy to be vulnerable to cross site scripting attacks in earlier versions of Rails, but Rails 3 solves this by automatically escaping unsafe input.
RubyTu.be is a community driven collection of Ruby related videos and screencasts. Questions? Comments? Contact RubyTu.be via e-mail or click on the Feedback GetSatisfaction widget found on the other side of the page.