Gaetano Giunta

I am not sure if I follow fully the reasoning of @Plopix - esp. because so far I have never relied on using env vars in SF config. Otoh I...

pps: agree with @alongosz: can add a few more #comments to the existing config files. Fe: config. yml: `# Put parameters here that don't need to change on each machine...

Maybe I am dumb, but I also find that the readme is a bit short: what happens after you start the app on port 9000? do you get a web...

Fully agree that more doc on how Flex works and how it can be tweaked would go a long way in making it more palatable to developers who still want...

PS: The only part of the php code which is evaluated in line 1069 that comes from an untrusted source is sanitized via this call: `$opts['new_function_name'] = preg_replace(array('/\./', '/[^a-zA-Z0-9_\x7f-\xff]/'), array('_',...

In the end, I found another place where untrusted data was used to generate php code, sadly without appropriate sanitization being applied. This has now been fixed. Detailed explanation of...

PS: even with debug mode on, and if the code is being run within a browser, the way the error string which is being printed is built makes it safe,...

PS: I double-checked the current version of the code. The equivalent line is now at Request.php:345 `print $xmlRpcParser->_xh['isf_reason']` By looking at how the `isf_reason` value is built, one can see...

Long time no see :-) I have tested following redirections, and indeed it was not possible to do so. The code has now been fixed to allow that - the...

@s0me0ther a recommended replacement for the phpxmlrpc extension is https://github.com/gggeek/polyfill-xmlrpc @SusanthaBandara I presume you mean "fixed by installing the extension from pecl"? If so, be aware that the extension from...