Sebastian Pipping

Pull request migrating to argparse welcome?

1

Hi! I'm surprised to see use of optparse here. I'd make a pull request migrating to argparse if it has a chance to be accepted. What do you think? Best,...

Bundles vulnerable copy of Expat - please update to 2.2.4

2

Hi! This repository [bundles an outdated vulnerable copy of Expat 2.1.0](https://github.com/jjensen/luaplus51-all/tree/master/Src/Modules/expat/lib). Please update your copy to version 2.2.1 with the latest security fixes. A change log with details is available...

Hi! It would be great to have a few words about how this compares to Django's `fetch_related` in the docs. Thank you! Best, Sebastian

Provide help handling wkhtmltopdf error "ContentNotFoundError"?

5

Hi! wkhtmltopdf might fail with a line`[..]ContentNotFoundError[..]` despite patching in `--load-media-error-handling ignore` to the command line. Here's the rather dirty (Python 3) hack that I used at some point. I...

Hi! Are you aware of https://pypi.org/project/headless-pdfkit/ and https://github.com/JazzCore/python-pdfkit/issues/56#issuecomment-305593936 ? It might be worth to support out of the box. Best, Sebastian

Windows: Update Expat to 2.2.3 to fix DLL hijacking (CVE-2017-11742)

4

Hi! You seem target Windows and bundle Expat 2.2.2. Please update your bundle to [Expat 2.2.3](https://github.com/libexpat/libexpat/blob/master/expat/Changes) to fix vulnerability [CVE-2017-11742](https://www.cvedetails.com/cve/CVE-2017-11742/). Thanks!

Security issue with /tmp/tickeys.log and /tmp/tickeys_terminal_window_id

4

Hi there! Using predictable paths in a word-writable directory like `/tmp` is a security risk, as other users can run soft- and hardlinks attacks on us, for instance. Affected paths...

Hi! Currently, tickeys has hardcoded dependencies like `cython==0.20.2` (https://github.com/BillBillBillBill/Tickeys-linux/blob/master/setup.py#L5) on a single very specific version (at multiple places). That inflexibility is a big problem for distribution packing where other packages...

Hi there! As I read 7af54e5433743efa5a75f41b110a5f47f0bdd244 release 0.2.5 is in Git, already. Did you forget to tag the release in Git? Thanks and best, Sebastian

Pulling in rpms newer than those needed?

5

When trying to install fedora-22, a version of rpm is installed that is too to mee other the requirements of other packages, it seems. A version "