Trevor Burnham

Are command arguments sanitized?

1

If I do the following: ``` input = getStringFromUser(); client = require('lib/redis-client').createClient(); client.get(input); ``` will the person giving me the input be able to do something nasty, i.e. execute commands...

How to ensure that a single message is published?

1

Try running the following Ruby file: ``` require 'rubygems' require 'mq' EM.run { amq = MQ.new queue = amq.queue("whatev") queue.publish({"foo" => "bar"}) break } ``` The message is never published....

Support for relative paths

2

If I have a project open, I'd generally prefer to get a path of the form ``` /src/myfile.js ``` rather than ``` /Users/tburnham/projects/new_project/src/myfile.js ``` Do you have any plans to...

Syntax highlighting for :markdown filter is too greedy

4

Here's a test case: ``` !!!5 p :markdown This looks fine. p Why is this blue? ``` This renders as http://cl.ly/030K0s3J1D1g3l0n1v2v Jade correctly interprets the `p` as being a separate...

Error: Could not generate profile.

9

I just installed node-profile, and when I try it on any file, I get the error ``` Could not generate profile. ``` This is the case even when I try...

Package postinstall step fails when spawning new node process

2

Output when running `./pnpm install` in a project with `[email protected]`: ``` node_modules/.pnpm/[email protected]/node_modules/core-js-pure: Running postinstall script, failed in 935ms .../node_modules/core-js-pure postinstall$ node -e "try{require('./postinstall')}catch(e){}" │ No HNVM_NODE version set. Please set...

Anonymous function calls fail to convert

6

The input ``` (function(a) { })(a); ``` should convert to either ``` ((a) ->)(a) ``` or, with the new `do` syntax, ``` do (a) -> ``` It currently converts to...

Numbers parsed incorrectly

1

There's an existing issue on pygments-main for this, but I thought I should bring it to your attention: https://bitbucket.org/birkenfeld/pygments-main/issue/769/incomplete-number-format-in-json-lexer Any number with a decimal point causes parsing to fail, as...

Bound/global mutate functions do not mutate remote data

2

# Bug report I'm a longtime SWR user, but I'm still puzzled by the behavior of the three different mutate functions: 1. The [bound mutate function](https://swr.vercel.app/docs/mutation#bound-mutate) returned by `useSWR`. 2....