chocolateboy

**Tags**: hash, hashes, octothorp, octothorpe, number sign, pound sign, sharp symbol Hash characters in headers are not handled correctly. It looks like GitHub just removes hashes (octothorpes) in headers when...

The text/label is needed and is no longer attached to the tweet. I have a workaround which is working locally, but it requires a new dependency which isn't ready for...

I understand the impulse, but this feels more like a way of mitigating [headlines](https://twitter.com/Lee_Holmes/status/1186377279691034625) than exploits. Looking through the list of [critical](https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm+severity%3Acritical) and [high](https://github.com/advisories?query=type%3Areviewed+ecosystem%3Anpm+severity%3Ahigh) severity vulnerabilities, it seems to me...

@NeoPhi > For example, JSON.stringify(obj) will always produce the same result, as long as obj is created in the same manner. I'd love to see a source for that statement...

@NeoPhi Interesting. Thanks for the link! > You'd need to use a custom serializer to make { foo: "bar", baz: "quux" } equal { baz: "quux", foo: "bar" } if...

> On the other hand, the same may be achieved by any user by setting security.csp.enable to false in about:config Does the header solution disable CSP for all requests to...

> > So there would be a third solution, to remove the v1 entirely > > It seems that ParserV1 was kept for backwards compatibility/"just in case something breaks" >...

Same error for this, which is also valid according to that site and other YAML processors: ### Input ```yaml foo: [ 'bar', { baz: 42 } ] ``` ### Error...

This is what the [blacklist](https://github.com/ueokande/vim-vixen/blob/master/docs/blacklist.md) is for.

Why would you want keyboard events for this addon to be exposed to the page?