title: Is there any way for a malicious user to view the controller/model code in my Rails app while it is running?
body: <p>This is probably a stupid question but I'll go ahead and humble myself. </p>
  
  <p>The Ruby code in my controllers and models are interpreted so that a HTML result is sent to the browser. Ok, I get that part.</p>
  
  <p>But is there any way for a mailicious user to somehow take a peek at the Ruby code in the controllers and models by bypassing the process that converts or interprets that code before it is sent to the browser?</p>
  
  <p>The reason I'm concerned is I am planning on doing some order processing in my app and if a malicious user was able to do that, they might be able to figure out how to do all kinds of unpleasant things.</p>