2006-01-26から1日間の記事一覧

How To Protect Your Rails Apps Against Cross Site Scripting Attacks

RoR

The issue of Cross Site Scripting (XSS) vulnerabilities in web applications has been getting a lot of attention lately due to hacks on high-profile sites such as LiveJournal...The attached file (html_escaper.rb) makes it easy to protect yo…

Mongrel HTTP Server 0.1.2

RoR

...The 0.1.2 release sports a nifty fresh all C URIClassifier that's a hell of a lot faster. This has made things very quick and could become the basis for an incredibly good caching mechanism in the future.... Warning: ...This release als…

Change the Xen scheduler

Q: I am experiencing a heavy slowdown of the entire dom0 and all other domUs if *one* domU gets under heavy load.Is there any way to tighten this domU by adjusting something like scheduling? A: You can use elevator=cfq as the command line …

Lighttpd 1.4.9 is buggy

Lots of people on the Rails ML reported that problem on different OSes - Linux, FreeBSD and OS X. Better stay with 1.4.8

Shovel

RoR

Shovel is a customized Switchtower deployment file to setup config files on TextDrive in order to make it easier to start running Rails with lighttpd. It could also be modified to work with other shared hosts who run lighttpd.

RailsCron 0.2

RoR

RailsCron is a way to execute background tasks using your Ruby on Rails environment. The RailsCron object is an ActiveRecord, so you can manipulate it in familiar ways. RailsCron SVN Repository