dkasak

" XDG Environment For VIM
" =======================
"
" References
" ----------
"
" - http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html#variables
" - http://tlvince.com/vim-respect-xdg
" - https://gist.github.com/kaleb/3885679 (the original version)
"

dkasak

Keybase proof

I hereby claim:

• I am dkasak on github.
• I am dkasak (https://keybase.io/dkasak) on keybase.
• I have a public key whose fingerprint is BC7F 6B2F FC7E 94CA 6C60 BD42 50D3 BAAD CE0B C33E

To claim this, I am signing this object:

dkasak

Summary

The endpoint https://challenge.intigriti.io/ is vulnerable to a DOM-based XSS which allows the attacker to execute arbitrary JavaScript in the context of the page's top-level window.

Consequences

Since the attacker can execute arbitrary JavaScript in the context of the page, he would be able to steal the user's credentials, or any other secrets

dkasak

#!/usr/bin/env python

# This program is free software. It comes without any warranty, to the extent
# permitted by applicable law. You can redistribute it and/or modify it under
# the terms of the Do What The Fuck You Want To Public License, Version 2, as
# published by Sam Hocevar. See http://www.wtfpl.net/ for more details.

"""
This is a simple daemon implementing freedesktop.org's file manager interface
(http://www.freedesktop.org/wiki/Specifications/file-manager-interface/).

dkasak

# Maintainer: Denis Kasak <dkasak|AT|termina.org.uk>

pkgname=ekho
pkgver=7.7.1
pkgrel=1
pkgdesc="Chinese text-to-speech (TTS) software for Cantonese, Mandarin, Zhaoan Hakka, Tibetan, Ngangien and Korean"
arch=('i686' 'x86_64')
url="http://www.eguidedog.net/ekho.php"
license=('GPL')
makedepends=('automake' 'autoconf')

dkasak

--- ../configure.ac.orig	2020-02-19 13:10:41.419383896 +0100
+++ configure.ac	2020-02-19 14:14:36.189197818 +0100
@@ -106,9 +106,20 @@
           [AC_MSG_FAILURE([ncurses test failed])],
           [])
 
+          AC_LANG_CPLUSPLUS()
+          AC_CHECK_LIB([estbase], [main], [],
+            [AC_MSG_FAILURE([estbase test failed])],
+            []

dkasak

diff --git a/PKGBUILD b/PKGBUILD
index ce46d58..bcd9e0d 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,22 +7,28 @@ pkgdesc="Chinese text-to-speech (TTS) software for Cantonese, Mandarin, Zhaoan H
 arch=('i686' 'x86_64')
 url="http://www.eguidedog.net/ekho.php"
 license=('GPL')
+makedepends=('automake' 'autoconf')
 depends=('libpulse' 'lame' 'festival' 'ncurses' 'espeak')

dkasak

setTimeout(function() {
    Java.perform(function() {

        var TrustManagerImpl = Java.use('com.android.org.conscrypt.TrustManagerImpl');

        TrustManagerImpl.verifyChain.implementation = function(untrustedChain,
            trustAnchorChain, host, clientAuth, ocspData, tlsSctData) {
            return untrustedChain;
        }
    });

dkasak

diff --git a/.SRCINFO b/.SRCINFO
index e2983e4..b1a3ea0 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -5,25 +5,12 @@ pkgbase = python-censys
 	url = https://github.com/censys/censys-python
 	arch = any
 	license = Apache
-	makedepends = python
 	makedepends = python-setuptools

dkasak

From 3c58f86d6b025a0be2d886d45123d44538e35f84 Mon Sep 17 00:00:00 2001
From: Denis Kasak <[email protected]>
Date: Sat, 12 Sep 2020 17:20:28 +0200
Subject: [PATCH] Fix dependencies and several other issues.

- Fix dependencies by removing some stale ones and adding missing ones.
  The list was sourced from the requirements.txt file from upstream.
- Move python-pytest to makedepends.
- Update post-install message to mention the new location for API keys
  in /etc and to enumerate all APIs requiring keys.