Hi everybody! Rails 3.0.6 has been released!
Let's get the serious business out of the way first:
Rails versions 3.0.x prior to 3.0.6 contain an XSS vulnerability. The
vulnerability manifests itself via the auto_link
method. The auto_link
Index: hiki/util.rb | |
=================================================================== | |
--- hiki/util.rb (revision 1101) | |
+++ hiki/util.rb (working copy) | |
@@ -61,7 +61,7 @@ | |
# # => "%27Stop%21%27+said+Fred" | |
def escape(string) | |
string.gsub(/([^ a-zA-Z0-9_.-]+)/n) do | |
- '%' + $1.unpack('H2' * $1.size).join('%').upcase | |
+ '%' + $1.unpack('H2' * $1.bytesize).join('%').upcase |
<?xml version="1.0"?> | |
<root> | |
<list> | |
<item> | |
<name>Handy Underscore</name> | |
<list> | |
<item> | |
<name>Command_R to Command_R</name> | |
<appendix>(+ When you type Command_R only, send Underscore)</appendix> | |
<identifier>remap.commandR2commandR_underscore</identifier> |
Hi everybody! Rails 3.0.6 has been released!
Let's get the serious business out of the way first:
Rails versions 3.0.x prior to 3.0.6 contain an XSS vulnerability. The
vulnerability manifests itself via the auto_link
method. The auto_link
#!/bin/bash | |
for path in /usr/src/linux-*; do | |
version=${path#*/linux-} | |
if qfile $path > /dev/null; then | |
echo "$version: skip" | |
else | |
echo "$version: removing" | |
cmd="rm -rf $path /lib/modules/$version /boot/*-$version /boot/*-$version.old" |
#!/usr/bin/env ruby | |
# Convert Trac DB Wiki pages to Markdown source files | |
# This script is based on http://github.com/seven1m/trac_wiki_to_github which | |
# converted all pages from a Trac DB to GitHub Wiki format (as Textile). | |
# | |
# I made two changes: | |
# - uses MarkDown format instead | |
# - uses the sqllite3-ruby gem which does not need Ruby 1.9 |
#compdef up | |
segments=$(perl -le '$p=$ENV{PWD};$p =~ tr/\// /; print $p') | |
_arguments "1:first:($segments)" |
昨日、松江のRuby World Conference 2010行ったんです。RWC2010。 | |
そしたらなんか言ってることがめちゃくちゃ偏ってて聞いてられないんです。 | |
で、よく見たらなんかスライド出てて | |
「期間、予算の都合からJavaに関しては実際に物を作ってのデータとりを行わず、 | |
論理的な見積り値の算出にとどめた。見積り値の算出は富士通のファンクションスケール法」 | |
とか書いてあるんです。 | |
もうね、アホかと。馬鹿かと。 | |
お前らな、自社基準の想像上の生産性と比較して検証とかいってんじゃねーよ、ボケが。 | |
論理的な見積り値だよ、論理的な見積り値。 | |
なんかWeb初心者いるし。HTMLやJSに苦戦か。たいへんだな。 |
NOTE: This is English translation of "http://shyouhei.tumblr.com/post/145555071/ruby". | |
The theme of Ruby Kaigi 2011 is "The last RubyKaigi" and the chariman Takahashi apparently got the | |
inspiration from this blog which Urabe san wrote a year ago. I translated this so that non Japanese | |
speaker also understand the context of post RubyKaigi discussions going on in Japanese Ruby community. | |
あえて言うがRuby会議はそろそろ一回終わってみるべき。 | |
RubyKaigi must die (for at least once). | |
Original title: Let me say that Ruby Kaigi should end for now. |
# Rack file for local Rubygems server, using YARD | |
require "rubygems" | |
require "yard" | |
libraries = {} | |
Gem.source_index.find_name('').each do |spec| | |
libraries[spec.name] ||= [] | |
libraries[spec.name] << YARD::Server::LibraryVersion.new(spec.name, spec.version.to_s, nil, :gem) | |
end |
;;; inao-mode.el --- major mode for writing inao manuscripts | |
;; Copyright (C) 2010 SAKURAI Masashi | |
;; Author: SAKURAI Masashi <m.sakurai at kiwanami.net> | |
;; Keywords: outlines, convenience | |
;; This program is free software; you can redistribute it and/or modify | |
;; it under the terms of the GNU General Public License as published by | |
;; the Free Software Foundation, either version 3 of the License, or |