Erik Benoist

ReDOS when using a variable path and query during extract

2

### Template Used ``` Addressable::Template.new("{scheme}://{host}{/path*}{?query*}") ``` When the template above extracts a url with an empty query string, the regex used displays immense performance degradation. ``` template.extract("http://host.com/abcdefghijklmnopqrstuvwxyz?a") ``` All the...

Question: Inject Request Context?

16

How would one go about implementing the `@AuthenticatedUser` Arg annotation shown in the examples? Can a Provider also have the Jetty request context injected to make headers/session values available? This...

First off, this is a fantastic project. I was able to rewrite a squirrels nest of node code with this library in much fewer lines and the API here took...

The /cors endpoint, as configured currently echo's any params passed to the `/attachinary/cors` endpoint. This means that unscrupulous users can use this endpoint to trick JavaScript code into thinking that...

app_type seems to be ignored and all apps are created with a rails setup. Is there an easy way to use jetpack with just rack/sinatra? When starting the app, the...