Slava Semushin comments

Results 149 comments of


                                            Slava Semushin

Update robotframework-httprequestlibrary to 0.0.17

The update breaks tests: https://github.com/Hi-Fi/robotframework-httprequestlibrary/issues/62

Pack the application into JAR file instead of WAR

Don't forget to update `infra/docker/.dockerignore`

Update Thymeleaf to 3.0.15

`Series.Add-Comment.Logic.Add a comment` test fails with exception: > ParseException: Instantiation of new objects and access to static classes is forbidden in this context (template: "series/info" - line 393, col 29)...

Update Thymeleaf to 3.0.15

Perhaps, this can be useful: https://www.baeldung.com/thymeleaf-js-function-call

The Changelog is very outdated.

Releases also don't contain a list of changes :-(

The Changelog is very outdated.

I'd suggest to use some tools for generating changelogs (for instance, https://github.com/cookpete/auto-changelog) -- it's better than nothing.

Add integration tests for checking that forms has field with CSRF token

This article can be interesting: http://www.baeldung.com/csrf-thymeleaf-with-spring-security

Terraform: add Mailgun

See https://www.terraform.io/docs/providers/mailgun/index.html

Add Content-Security-Policy header

Explicitly specify directives that aren't covered by `default-src` (like `form-action`, see https://hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5).

Add Content-Security-Policy header

Read also: https://www.troyhunt.com/locking-down-your-website-scripts-with-csp-hashes-nonces-and-report-uri/