For a while, I have felt that the following is the correct way to improve the mass assignment problem without increasing the burden on new users. Now that the problem with the Rails default has been brought up again, it's a good time to revisit it.
When creating a form with form_for, include a signed token including all of the fields that were created at form creation time. Only these fields are allowed.
To allow new known fields to be added via JS, we could add:
Composed Method: The idea of, rather than having a super long/complex method, you break the functionality up into lots of little methods that are, like, 1-5 lines. Folks general construe that these methods should be private.
Method Object: For a method that would normally take a huge number of arguments or has a lot of local variables that make it hard to do Composed Method, you make an object, store the variables as state and then compose your shit in there. And the original method just delegates over to the new object.
The reason I asked is that it seems like what people generally construe as "should be private" in Composed Method could reasonably be expected to be public on your Method Object. That, anyway, is what came to mind with the phrase "public on another object".
| (ns pom2proj | |
| (:require [clojure.xml :as xml] | |
| [clojure.zip :as zip] | |
| [clojure.java.io :as io] | |
| [clojure.data.zip.xml :as zx]) | |
| (:use [clojure.pprint :only [pprint]])) | |
| (defn- text-attrs | |
| [loc ks] | |
| (map (fn [k] |
| #!/usr/bin/env ruby | |
| # giftube – Generates an animated gif from a YouTube url. | |
| # | |
| # Usage: | |
| # | |
| # giftube [youtube url] [minute:second] [duration] | |
| # | |
| # ex. | |
| # |
| require 'minitest/autorun' | |
| ### | |
| # Test to demonstrate TCO in Ruby. Tested in 1.9.2+ | |
| class TestTCO < MiniTest::Unit::TestCase | |
| code = <<-eocode | |
| class Facts | |
| def fact_helper(n, res) | |
| if n == 1 | |
| res |
| describe "Shopping Cart Requests" do | |
| let!(:user) { Fabricate(:user) } | |
| before(:each) do | |
| login_user_post("admin", "admin") | |
| end | |
| context "when I visit the shopping cart" do | |
| it " show the logged in users' cart items " do | |
| #Test stuff |
| # Colors | |
| escape = -> n { STDOUT.tty? ? "\033[#{n}m" : "" } | |
| red = escape[31] | |
| green = escape[32] | |
| yellow = escape[33] | |
| blue = escape[34] | |
| magenta = escape[35] | |
| cyan = escape[36] | |
| reset = escape[ 0] |
| Latency Comparison Numbers (~2012) | |
| ---------------------------------- | |
| L1 cache reference 0.5 ns | |
| Branch mispredict 5 ns | |
| L2 cache reference 7 ns 14x L1 cache | |
| Mutex lock/unlock 25 ns | |
| Main memory reference 100 ns 20x L2 cache, 200x L1 cache | |
| Compress 1K bytes with Zippy 3,000 ns 3 us | |
| Send 1K bytes over 1 Gbps network 10,000 ns 10 us | |
| Read 4K randomly from SSD* 150,000 ns 150 us ~1GB/sec SSD |
