Skip to content

Instantly share code, notes, and snippets.

View carlware's full-sized avatar
🎯
Focusing

Carlos Ramirez carlware

🎯
Focusing
View GitHub Profile
# -*- coding: utf-8 -*-
'''
Tricky admin -> xadmin merger.
Alex Moiseenko aka IMDagger.
'''
import logging
import types
from functools import wraps, update_wrapper
from django.http import HttpRequest
from django.contrib.admin import ModelAdmin
# This is an example resource file for rTorrent. Copy to
# ~/.rtorrent.rc and enable/modify the options as needed. Remember to
# uncomment the options you wish to enable.
# Maximum and minimum number of peers to connect to per torrent.
min_peers = 1
max_peers = 100
# Same as above but for seeding completed torrents (-1 = same as downloading)
angular.module('ClientSuccess.services').factory 'fileService', (authService, $q, $rootScope)->
service = {}
service.uploadAvatar = (file) ->
deferred = $q.defer()
apiAuth = authService.enableAuth()
query =
binary: null
id: null
postIt = () ->
# https://groups.google.com/forum/#!topic/django-rest-framework/WTZ0H6dyJe4
class TranslateSerializer(serializers.ModelSerializer):
def __init__(self, *args, **kwargs):
super(TranslateSerializer, self).__init__(*args, **kwargs)
self.translate_fields = getattr(self.Meta, 'translate_fields', ())
if kwargs.get('context', None):
self.lang = utils.get_request_language(kwargs['context'].get('request', None))
def to_native(self, obj):
import redis
import threading
class Listener(threading.Thread):
def __init__(self, r, channels):
threading.Thread.__init__(self)
self.redis = r
self.pubsub = self.redis.pubsub()
self.pubsub.subscribe(channels)

tl;dr

  1. Don't run as root.
  2. For sessions, set httpOnly (and secure to true if running over SSL) when setting cookies.
  3. Use the Helmet for secure headers: https://github.com/evilpacket/helmet
  4. Enable csrf for preventing Cross-Site Request Forgery: http://expressjs.com/api.html#csrf
  5. Don't use the deprecated bodyParser() and only use multipart explicitly. To avoid multiparts vulnerability to 'temp file' bloat, use the defer property and pipe() the multipart upload stream to the intended destination.
@carlware
carlware / lorem.jade
Last active August 29, 2015 14:07 — forked from geedmo/lorem.jade
//- ----------------------------------
//- Usage:
//- include lorem
//- p
//- mixin lorem(25)
//- ----------------------------------
//- new sentece after N words
- var colonEvery = 10
!!! 5
html(class='no-js')
head
meta(charset='utf-8')
meta(http-equiv='X-UA-Compatible', content='IE=edge')
title
meta(name='description', content='')
meta(name='viewport', content='width=device-width, initial-scale=1')
@carlware
carlware / fabfile.py
Last active August 29, 2015 14:08 — forked from mattmakai/fabfile.py
from fabric.api import *
from fabric.context_managers import cd
from fabric.operations import local as lrun, sudo
from fabric.contrib.files import sed
from fabric.utils import warn
from local_fabfile import root, prod, lh, SERVER_IP
def virtualenv(command, run_directory=''):
if run_directory == '':
@carlware
carlware / fabfile.py
Last active August 29, 2015 14:08 — forked from fiee/fabfile.py
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
fabfile for Django
------------------
see http://morethanseven.net/2009/07/27/fabric-django-git-apache-mod_wsgi-virtualenv-and-p/
modified for fabric 0.9/1.0 by Hraban (fiëé visuëlle)
several additions, corrections and customizations, too