Michael Grosser

under projects/show I can see: ``` [Escaped Output] @project.repositories.first.name.html_safe ``` so I doubt it did anything smart 🤷‍♂️

ah ... it works when it's directly in the controller but not when it's in the parent

it would be interesting to say "you have to whitelist unknown instance vars or they are considered models" so I would have been notified that the class of `@project` is...

action is in the parent controller and not in the child controller On Fri, Aug 24, 2018 at 2:31 PM Justin wrote: > ah ... it works when it's directly...

Problems are: - query could be incorrect if the name includes ? or % and return wrong results (possibly sensoitive information) - could be abused for DoS since queries with...

let's merge em :)

I'm calling .url on an serviceobject (response from an api)

sorbet works by booting the app and loading all it's code I think ... so might be hard to add, but if sorbet annotations exist for the method they might...

thx, the `opa eval` helped me build a script I can copy-paste my test-cases into :D

this would be a really nice feature since some projects don't want to add a .go-version to not duplicate go.mod info will need changes in: - https://github.com/syndbg/goenv/blob/a9349e1db62df5c65227933cde7d9c4435ac9310/libexec/goenv-version-file to make it...