Allen Madsen

Rename Project

1

Hey, I just noticed this project and the book you're writing are using the same name as my elixir libraries that I've been building for the past 2 years. https://github.com/conduitframework...

HTTP2 CVEs

3

A number of CVE's were published yesterday that affect a lot of HTTP2 implementations. I wanted to flag them here in case ace is also vulnerable to any of them....

$ ruby -v ruby 1.9.2dev (2010-05-31 revision 28117) [x86_64-darwin10.3.1] $ gem -v 1.3.7 $ irb ruby-1.9.2-preview3 > require 'distance_measures' LoadError: dlopen(/Users/blatyo/.rvm/gems/ruby-1.9.2-preview3@rails3/gems/distance_measures-0.0.4/lib/distance_measures/euclidean_distance.bundle, 9): Library not loaded: /Users/reddavis/.rvm/rubies/ruby-1.9.2-rc1/lib/libruby.1.9.1.dylib Referenced from: /Users/blatyo/.rvm/gems/ruby-1.9.2-preview3@rails3/gems/distance_measures-0.0.4/lib/distance_measures/euclidean_distance.bundle Reason:...

Allow async timeouts to be rescued and an error inserted for resolution

11

### Environment * Elixir version (elixir -v): Erlang/OTP 23 [erts-11.1.1] [source] [64-bit] [smp:12:12] [ds:12:12:10] [async-threads:1] [hipe] Elixir 1.11.1 (compiled with Erlang/OTP 23) * Absinthe version (mix deps | grep absinthe):...

Editing a user requires them to set a password

4

So, imagine this scenario. 1. User creates account with Google Oauth using pow_assent 2. User goes to edit page to change their email 3. User gets an error, because they...

I'm using a library that generates connections as supervisors because there's multiple processes to manage the connection. Technically, the connection is a child of the supervisor, but every function that...

Add support for variable hear input

5

It would be useful if what james could hear wasn't static. For example, imagine you could ask james a question: ``` ruby hear "What time will it be in (x)"...

Serve assets through a CDN (master)

1

I need to serve assets through a CDN and stock paperclip supports that by specifying: ``` :s3_host_alias => "www.cdn.com", :url => ":s3_alias_url" ``` Currently, paperclipped doesn't have a setting for...

I need to serve assets through a CDN and stock paperclip supports that by specifying: ``` :s3_host_alias => "www.cdn.com", :url => ":s3_alias_url" ``` Currently, paperclipped doesn't have a setting for...

Susceptible to DOS attack

1

The code in this module is calling atomize on user provided values. https://github.com/sb8244/okr_app_pub/blob/master/lib/okr_app/query/list_query.ex#L21-L31 Because atoms are not garbage collected in Erlang, this allows an attacker to arbitrarily create atoms that...