rubysec

rubysec copied to clipboard

Bumps [rack](https://github.com/rack/rack) from 2.2.6.2 to 2.2.6.4. Commits 27addc7 bump version ee7919e Avoid ReDoS problem d6b5b2b bump version 9aac375 Limit all multipart parts, not just files See full diff in compare...

dependabot[bot]

Bumps [rack](https://github.com/rack/rack) from 2.2.6.2 to 2.2.6.4. Commits 27addc7 bump version ee7919e Avoid ReDoS problem d6b5b2b bump version 9aac375 Limit all multipart parts, not just files See full diff in compare...

dependabot[bot]

Bumps [rack](https://github.com/rack/rack) from 2.2.6.2 to 2.2.6.4. Commits 27addc7 bump version ee7919e Avoid ReDoS problem d6b5b2b bump version 9aac375 Limit all multipart parts, not just files See full diff in compare...

dependabot[bot]

Bumps [rack](https://github.com/rack/rack) from 2.2.6.2 to 2.2.6.4. Commits 27addc7 bump version ee7919e Avoid ReDoS problem d6b5b2b bump version 9aac375 Limit all multipart parts, not just files See full diff in compare...

dependabot[bot]

Bumps [sinatra](https://github.com/sinatra/sinatra) from 2.2.0 to 2.2.3. Changelog Sourced from sinatra's changelog. 2.2.3 / 2022-11-25 Fix: Escape filename in the Content-Disposition header. #1841 by Kunpei Sakai Fix: fixed ReDoS for Rack::Protection::IPSpoofing....

dependabot[bot]

Bumps [sinatra](https://github.com/sinatra/sinatra) from 2.2.0 to 2.2.3. Changelog Sourced from sinatra's changelog. 2.2.3 / 2022-11-25 Fix: Escape filename in the Content-Disposition header. #1841 by Kunpei Sakai Fix: fixed ReDoS for Rack::Protection::IPSpoofing....

dependabot[bot]

colorize rspec output

1

It might be nice to drop in a default .rspec file for users with --color --format d, so they get colorful output that tells them exactly which tests are breaking

dguido

Solicit mbj to write a mutant exercise for the book?

6

dguido

Level1 involves running shell command, not ruby code

dguido

matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf

dguido