Stefano D. Mtangoo comments

Results 184 comments of


                                            Stefano D. Mtangoo

Improve Security on Form Actions

@badbreze Can you explain how do we get XSS attack when using ` window.location.href` given that this call is to the browser and on the client side?

Improve Security on Form Actions

@Webkadabra Learning discussing without name calling and intimidation is possible and encouraged in Yii community. We encourage people here to make PR. We debate it based on merits and agree...

Improve Security on Form Actions

> The thing is that we're passing arguments to jQuery directly from the URL, an extremely vulnerable door to the application code, so the PR is (at least in my...

Improve Security on Form Actions

> This is not about encoding an URL, but about encoding a HTML attribute. I think we can safely assume that the most popular JS library can do such basic...

Improve Security on Form Actions

> please point to the name calling you're so offended by "Totally nonsense PR" The rest can be read on your comment it is still there. You couldn't discuss PR...

Improve Security on Form Actions

@Webkadabra kindly take @rob006's advice and help us with your great skills iron bugs. It is welcome and appreciated. Bragging and discouraging people who took their time to make actual...

Clone issue in update form

Checkout https://github.com/yii2-extensions/dynamicform and open issue if it does not work

Raise min version to `PHP 7.3`, check compatibility `PHP 8.3`.

Shouldn't this go up to at least 7.4 for the version before raising to 8.1?

> You already have a class wxDatabaseErrorReporter that more or less does what you describe. My suggestion would be to rename wxDatabaseErrorReporter::ThrowDatabaseException to something like wxDatabaseErrorReporter::LogError and call wxLogError by...

wxDatabaseException does not derive from std::exception

Thanks @KerryL I'm planning to revisit the library and this will definitely going to be resolved!