Paolo Montrasio

Usually doesn't work on Google News on Firefox Android

5

I went to https://news.google.com/topstories?hl=en-US&gl=US&ceid=US:en with both Firefox 76 Ubuntu and Firefox 68 Android (the latest available version.) I was not logged in into Google both on desktop and on mobile,...

--reinstall doesn't update the migrations and the templates

3

I added coherence to my project with `mix coh.install` and verified that it generated the `*_create_coherence_user.exs` migration file. Then I reinstalled with some options ``` mix coh.install --reinstall --authenticatable --no-invitable...

Security Related Headers check failed, to fix or not to fix and how?

15

I run dawn on a Rails 4 project and got this ``` 09:28:58 [$] dawn: Description: To set a header value, simply access the response.headers object as a hash inside...

Query parameters are not configured in the API Gateway

5

I have this in the settings.yml for an application that should only demonstrate how to read parameters from a GET query string or a POST body: ``` greetingsapi: description: Greetings...

License?

1

Seen on HN. A friend made me notice that this project has no license. Main.js has no notices. I must assume that all code is copyrighted by you by default...

*_by_lua_block directives break Letsencrypt's certbot

1

This is more of an issue for certbot than for this project but maybe there are some mitigating actions that you could do. Any directive which includes a lua block...

DRuby: name taken

1

Ruby's standard library has a module called DRb which extended name is dRuby https://ruby-doc.org/stdlib-2.4.2/libdoc/drb/rdoc/DRb.html > dRuby is a distributed object system for Ruby. My first thought reading about this DRuby...

Missing installation dependency for Linux

2

This is needed to be able to run on Linux (Ubuntu 16.04) ``` sudo apt install gir1.2-webkit-3.0 ``` or it will fail with ``` /home/me/.local/lib/python2.7/site-packages/application/server/static/ WARNING:webview.qt:PyQt4 is not found WARNING:webview.qt:PyQt5...

SOAP requests to https urls fails with `{:error, :enoent}` I traced it back to `src/detergent.erl` in deps, which doesn't have pattern matching for URLs starting with `https`. It falls back...

Same Origin Policy bypass (CVE-2014-6041)

1

Tint is vulnerable to http://www.cvedetails.com/cve/CVE-2014-6041/ Summary: "The Android Browser application 4.2.1 on Android allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u0000 character,...