_gok2
Joined 12 years ago
Joined 12 years ago
If you’re seeing this regularly, it suggests there may be something unique or uncommon in your set-up. You may wish to isolate and change whatever that is.
I /have/ put other secrets into frontend code before, strictly for small temporary projects where the cost of implementing secret management outweighs the size of the project. And obviously not in code that was anywhere close to being deployed outside my own box.
Unfortunately the method outlined in the article allows access to environments that would otherwise be considered trusted and not-accessible over the internet, hence the problem
It's not clear (without a lot more digging) what impact the sockjs changes have on this issue.
It was only tested on Firefox, as a basic proof-of-concept. AIUI, chrome et al offer similar functionality but maybe the API is different
It may also take a few minutes to find and connect to the websocket, I think CRA webserver maybe only binds to one client at a time, so maybe it would pick up the connection after a webpack-dev-server reload or two.
function shorten(text, length) {
return new Promise((a, r) =>
fetch(`http://leftpad.io/shorten?l=${length}&v=${encodeURIComponent(text)}`).then(rx=>rx.text().then(a, r), r));
}I don't use gnome desktops, for similar reasons (although I'm also not the target audience for adopters, as I currently use Linux as my primary desktop environment!)
I use cinnamon, as, for my personal preferences, it strikes the best balance between familiarity, 'prettiness' and functionality of the options I've tried.
That’s a nice feature. But it has little to do with Windows/OSX equivalence.
It also highlights something I felt last time I tried KDE (admittedly a while ago).
There were lots of nice UX innovations and polish. But they didn’t feel familiar to me (as a user of many desktop environments). This makes switching much less of an appealing prospect to me.
If this is truly a humanitarian issue, then then disable the contact harvesting feature
From the picklingtools FAQ:
What versions of Python does PicklingTools support? Historically, versions 2.1.x to 2.6.x have been tested extensively. More recently, 2.7 has been tested and should work, but it has not been tested as much as the other versions.
[edit] formatting