RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Submit a post

You can use basic HTML markup (e.g. <a>) or Markdown.
Note that your post may be edited to suit the format of the site.

As you are not logged in, you will be
directed via GitHub to signup or sign in

Post Preview

Note: Only the first pargraph is shown on the front page and overly long paragraphs may be broken up.

Active window time logger (Linux)

Time Management Tool. I’ve written a Ruby gem that grabs the current active window name every 15 seconds and catalogs the time. Help keep track of productive/unproductive time. As I consider this a very helpful tool I felt this would be appropriate to share. See the gem clock_window.

Using Service Worker on Rails

So far there hasn’t been a good story for using the new JavaScript API, Service Worker, in Rails applications – until now! Service workers come with some unique requirements for deployment that don’t play nice with the default behavior of the Rails asset pipeline. My latest post shows how I approached this problem and packaged my solution into a new Ruby gem. https://rossta.net/blog/service-worker-on-rails.html

Imagetragick and How to Protect Ruby Apps from it

There is a huge vulnerability in ImageMagick. In layman’s terms, if you are doing any kind of image manipulations like uploading avatars, photos, resizing stuff, you are most likely using ImageMagick and it concerns you. In theory, by uploading a specially crafted file (which may be not an image at all or an SVG image with some “features”), the attacker can gain access to your system. This is VERY bad. The “trademark” for it is Imagetragick: https://imagetragick.com/ Sysadmins should install a special policy file on their systems ASAP. [more inside]

Yaroslav, good job for pointing out the fix of the trending ImageMagick vulnera…
Paperclip <4.3 seems to be vulnerable though. Anything less than 4.2.2 is vu…
I’m linking to this Reddit discussion to provide more context if people need it…
Everyone should be sandboxing ALL their image/vector manipulation libraries (no…

Object Oriented Ruby

I have been seeing a lot influence in ruby from Functional programming and not as such in ruby itself but in code written in ruby. Developers try new things, they are fascinated by other languages, how they solve problems. They try to change ruby into functional language, they loose sight of how problems can be solved in the Object Oriented Programming. Let’s do a refresher of some most important aspects of OOP. Read more on OORuby

Loading older posts