- Date: August 2013
- Instalation ISO: archlinux-2013.07.01-dual.iso
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package controllers.auth | |
import play.api._ | |
import play.api.mvc._ | |
import play.api.data._ | |
import views._ | |
object AuthController extends Controller { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# **************** READ THIS FIRST ****************** | |
# | |
# This is not a script for you to run. I repeat, do not download and run this! | |
# | |
# This is only a guide to show the required steps for successful UEFI + GRUB2 installation | |
# Many of the choices are examples or assumptions; don't blindly type shit into your machine | |
# until/unless you at least read the comments around each command | |
# | |
# These steps assume you've booted in UEFI mode by preparing your USB stick per these instructions: | |
# https://wiki.archlinux.org/index.php/UEFI#Archiso |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
vim /etc/udev/rules.d/10-my-media-automount.rules | |
# vim:enc=utf-8:nu:ai:si:et:ts=4:sw=4:ft=udevrules: | |
# | |
# /etc/udev/rules.d/10-my-media-automount.rules | |
# start at sdb to ignore the system hard drive | |
KERNEL!="sd[b-z]*", GOTO="my_media_automount_end" | |
ACTION=="add", PROGRAM!="/sbin/blkid %N", GOTO="my_media_automount_end" |
- Don't run as root.
- For sessions, set
httpOnly
(andsecure
totrue
if running over SSL) when setting cookies. - Use the Helmet for secure headers: https://github.com/evilpacket/helmet
- Enable
csrf
for preventing Cross-Site Request Forgery: http://expressjs.com/api.html#csrf - Don't use the deprecated
bodyParser()
and only use multipart explicitly. To avoid multiparts vulnerability to 'temp file' bloat, use thedefer
property andpipe()
the multipart upload stream to the intended destination.
- Date: August 2013
- Instalation ISO: archlinux-2013.07.01-dual.iso
OlderNewer