Results 52 comments of Patrick Kelley

Thanks for the quick response Just to confirm - the setWifiConfig method mentioned in the readme does not work. Is that correct? On Mon, Apr 26, 2021 at 10:39 PM...

Title says "xss payloads" but the comment is about attack vectors. A neat payload would be something similar to http://superlogout.com/ or http://adultcatfinder.com/ +1 for more attack vectors though.

Hey @grantmcconnaughey - I believe this PR is all cleaned up and ready to go now. Thanks for Lintly. It's a pretty cool library. In parallel we're working on a...

Hey @grantmcconnaughey, Sorry to bug you about this PR. I also maintain an OSS package so I totally understand how much work it is and how thankless it can often...

Merging this into our own fork of Lintly: https://github.com/23andme/lintly https://pypi.org/project/ttam-lintly/ The idea is that we can stop bugging Grant and still use his wonderful library. Thanks man.

Hey @oba11 - There's not currently a way to exclude justified issues from the daily report. Might be a simple PR?

That's a great idea. That situation brings lots of people to the gitter channel wondering what's going on. Maybe a `monkey check_permissions` command?

Good news: You would end up using the same REST API the Angular app is using. Bad news: Flask-Security-Fork has an (odd) method for API access; it requires disabling CSRF...

The GCS watcher should use the `@record_exception` decorator on the `slurp_items()` method: https://github.com/Netflix/security_monkey/blob/develop/security_monkey/decorators.py#L79 Similarly done in the IAM Role Watcher: https://github.com/Netflix/security_monkey/blob/develop/security_monkey/watchers/iam/iam_role.py#L50 @supertom - Do you need me to take this?

UI already has the option to "Justify Selected Issues". This request is to add the ability to select-all.