O'Reilly logo
  • Sookie Jay thinks this is interesting:

To protect the attachments with this new policy, you need to configure CarrierWave to not store them in the public directory

From

Cover of Rails 4 in Action: Revised Edition of Rails 3 in Action

Note

Why should they be stored outside the public folder?