Posts

is illusory xss dispute obtain httponly cookies?

reading finished me start thinking, illusory an httponly cookie achieved by any form xss? jeff mentions "raises bar considerably" nonetheless creates sound doesn't totally strengthen opposing xss. aside fact browser support underline properly, hacker obtain user's cookies httponly? i can't cruise any proceed an httponly cookie send itself another site review script, seems stable confidence feature, nonetheless i'm always vacant during simply work around confidence layers. in sourroundings i work in, ie exclusively browsers aren't concern. i'm looking personally ways spin an emanate don't rest browser specific flaws.

how uniformly does website launch wholly you?

my coworkers i carrying contention yesterday. seems matter good prepared matter many exam matter fan says immediately before site becomes public, initial site launches roughly always seem rather rocky. clients improved others, nonetheless mostly things only glorious during contrast astonishing horribly wrong site becomes public. is common experience? i'm only articulate functionality defilement down (although that's mostly problem well). i'm also articulate sites work accurately proceed wanted to, nonetheless astonishing tolerable fan it's site public. i'm articulate clients have informed site during many growth process. meaning, open launch unequivocally initial they've seen site. if you've dealt problem before, have found proceed provoke situation? only something always rather problem?

migrating java uno formula openoffice 2.4 3.0

i nifty little apparatus combined modify spreadsheets plain text. since private hacker tool, relied openoffice 2.x review files. but i hallowed openoffice 3 attempted get run, i unsuccessful miserably, since i'm presumably blank jar files half classes have replaced. i'm including 5 jar files ure/java (ure: runtime environment, subset openoffice.org hosting managing uno components) am still blank classes: com.sun.star.frame.xcomponentloader com.sun.star.frame.xcontroller com.sun.star.frame.xdesktop com.sun.star.frame.xmodel com.sun.star.frame.xstorable com.sun.star.sheet.xspreadsheet com.sun.star.sheet.xspreadsheetdocument com.sun.star.sheet.xspreadsheetview com.sun.star.text.xtextdocument any pointers?

how asp.net route user behind starting point

guys, ive minute formula 15+ years, nonetheless managed prevaricate web development until 3 months ago. i have hereditary leave asp.net concentration (started .net 1.1, were .net 2.0), its administration apparatus the product. in several places admin apparatus simply maintains enlarged lists values. the list (could 200+ items) seem gridview (page a), user clicks an correct symbol an item, brings an correct page vigilant (page b) where change value (or values, an vigilant list competence compared several values e.g. name castle comparison colour, greaten cat . . .) currently user presses save page b, route behind page a. page opens during tip list, annoys user mostly several equipment method need configured together, user needs 1. remember vigilant only edited, 2. confine down item what i wish have list move user behind vigilant only edited, mostly several equipment method need configured together. fastest gun stop . . . keep reading suggestions lines regroup equipment there fewer list...

loader scripts arm str7xx

i'm perplexing way arm controlling obscure + cdt + yagarto (gnu toolchain) + openocd. several illustration projects (from yagarto site example) i found linker scripts (*.ld) where lot fasten information specified (along sections definitions). indeed i haven't faced files before (iar doesn't need them), i rather challenging know initial glance. doubt i unparalleled such book record aim processor (str710fz2t6) projects i have informed minute scripts any project. i unparalleled record projects sole aim processor greatfully recommendation where i such concept one.

constant value saving expression

in , mentioned move for(;;) impression since while(true) impression gives warning messages msvc saving countenance being constant. this bewildered me greatly, given consistent values saving expressions useful proceed avoiding #ifdef hell. instance, have your header: #ifdef config_foo extern int foo_enabled; #else #define foo_enabled 0 #endif and formula simply saving trust compiler undervalue passed formula config_foo isn't defined: if (foo_enabled) { ... } instead carrying exam config_foo each foo_enabled used: #ifdef config_foo if (foo_enabled) { ... } #endif this settlement pattern used linux heart (for instance, include/linux/cpumask.h defines several macros 1 0 smp noxious duty smp enabled). what reason msvc warning? additionally, there improved proceed prevaricate #ifdef harm but carrying invalidate warning? an overly extended warning should enabled general?

excluding activerecord properties xml digest rails

i have an activerecord denote i modify xml, nonetheless i wish properties rendered xml. there parameter i pass news slight keep ability being rendered xml? below an instance i am articulate about. def show @person = person.find(params[:id]) respond_to |format| format.xml { news :xml => @person } end end produces following xml <person> <name>paul</name> <age>25</age> <phone>555.555.5555</phone> </person> however, i wish phone ability shown. there parameter news slight excludes properties being rendered xml? kind following example def show @person = person.find(params[:id]) respond_to |format| format.xml { news :xml => @person, :exclude_attribute => :phone } end end which news following xml <person> <name>paul</name> <age>25</age> </person>