RubyFlow The Ruby and Rails community linklog

×

The Ruby and Rails community linklog

Made a library? Written a blog post? Found a useful tutorial? Share it with the Ruby community here or just enjoy what everyone else has found!

Submit a post

You can use basic HTML markup (e.g. <a>) or Markdown.
Note that your post may be edited to suit the format of the site.

As you are not logged in, you will be
directed via GitHub to signup or sign in

Post Preview

Note: Only the first pargraph is shown on the front page and overly long paragraphs may be broken up.

Invisible Captcha: new release with time-sensitive form submissions

I just pushed a new release of Invisible Captcha (v0.9.0) with some interesting additions like: time-sensitive form submission (configurable per app, per controller and per action) and i18n integration. Also, we introduced a much better CI platform, to ensure compatibility across different Rails versions, and made a little clean up deprecating some useless things. [more inside]

Free Online Full-Day Jekyll Static Site Conference 10am-5pm (PST) Sat May 7th

Hello, Just a reminder: Tomorrow (Saturday) at 10am Pacific U.S. West Coast (e.g. San Francisco) Time starts the free single-track full-day online Jekyll static site builder conference aka JekyllConf. 12+ talks about all things Jekyll and friends. PS: For more static sites news bytes (Jekyll, Middleman, and friends) see the Static Times twitter news channel @statictimes. For more Jekyll goodies, see the Awesome Jekyll series @ Planet Jekyll ;-) Cheers.

Active window time logger (Linux)

Time Management Tool. I’ve written a Ruby gem that grabs the current active window name every 15 seconds and catalogs the time. Help keep track of productive/unproductive time. As I consider this a very helpful tool I felt this would be appropriate to share. See the gem clock_window.

Using Service Worker on Rails

So far there hasn’t been a good story for using the new JavaScript API, Service Worker, in Rails applications – until now! Service workers come with some unique requirements for deployment that don’t play nice with the default behavior of the Rails asset pipeline. My latest post shows how I approached this problem and packaged my solution into a new Ruby gem. https://rossta.net/blog/service-worker-on-rails.html

Imagetragick and How to Protect Ruby Apps from it

There is a huge vulnerability in ImageMagick. In layman’s terms, if you are doing any kind of image manipulations like uploading avatars, photos, resizing stuff, you are most likely using ImageMagick and it concerns you. In theory, by uploading a specially crafted file (which may be not an image at all or an SVG image with some “features”), the attacker can gain access to your system. This is VERY bad. The “trademark” for it is Imagetragick: https://imagetragick.com/ Sysadmins should install a special policy file on their systems ASAP. [more inside]

Yaroslav, good job for pointing out the fix of the trending ImageMagick vulnera…
Paperclip <4.3 seems to be vulnerable though. Anything less than 4.2.2 is vu…
I’m linking to this Reddit discussion to provide more context if people need it…
Everyone should be sandboxing ALL their image/vector manipulation libraries (no…
Loading older posts