Camelia, the Perl 6 bug

IRC log for #mojo, 2012-08-13

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:56 laouji joined #mojo
01:26 vel joined #mojo
01:44 scott joined #mojo
01:51 SmokeMachine_ joined #mojo
01:59 d4rkie joined #mojo
02:38 Psyche^ joined #mojo
02:51 noganex_ joined #mojo
03:07 arpadszasz joined #mojo
03:52 GitHub51 joined #mojo
03:52 GitHub51 [mojo] kraih pushed 1 new commit to master: http://git.io/yWnKlw
03:52 GitHub51 [mojo/master] fixed another small timing bug in Mojo::IOLoop test - Sebastian Riedel
03:52 GitHub51 left #mojo
04:22 d4rkie joined #mojo
04:25 d4rkie joined #mojo
04:26 xaka joined #mojo
04:41 GitHub48 joined #mojo
04:41 GitHub48 [mojo] kraih pushed 1 new commit to master: http://git.io/BYOmDA
04:41 GitHub48 [mojo/master] no need to mention HTML and CSS versions - Sebastian Riedel
04:41 GitHub48 left #mojo
04:49 GitHub119 joined #mojo
04:49 GitHub119 [mojo] kraih pushed 1 new commit to master: http://git.io/EvU6Lg
04:49 GitHub119 [mojo/master] a few more documentation tweaks - Sebastian Riedel
04:49 GitHub119 left #mojo
05:23 Britzel joined #mojo
05:25 ovnimancer joined #mojo
05:49 ovnimancer joined #mojo
05:51 spleenjack joined #mojo
05:57 ovnimancer joined #mojo
06:05 ovnimancer joined #mojo
06:05 ovnimancer left #mojo
06:44 berov joined #mojo
06:51 Vandal joined #mojo
06:57 dbr joined #mojo
07:08 batman joined #mojo
07:23 spleenjack1 joined #mojo
07:32 taryk joined #mojo
07:33 cosmincx joined #mojo
08:10 * sri yawns
08:23 batman left #mojo
08:23 sri http://www.cpantesters.org/cpan/report​/2e450232-e431-11e1-90a1-db9d1111614e
08:24 sri what a strange cpantesters fail
08:25 bc547 is there a reason ->render_static() does not accept an absolute path?
08:25 tempire to prevent noobs from doing bad things
08:26 tempire or anyone for that matter
08:26 bc547 however, ../../../../etc/passwd does work
08:26 bc547 so bad things can be done :-)
08:27 batman joined #mojo
08:27 bc547 the reason I ask is because I would want to store the static files outside of the public folder (even on a separate disk volume)
08:27 sri bad things being apps that are non-portable
08:28 tempire bc547: add another path - http://mojolicio.us/perldoc/Mojolicious#static
08:28 sri absolute paths are not portable, so we don't encourage that with core apis
08:29 sri what tempire said, and i believe there is also a plugin on cpan
08:30 batman left #mojo
08:30 bc547 tempire: since the static files contain confidential info, i would not prefer them to be 'public'. So my thought was to add my custom authorisation checks before returning the file
08:32 batman joined #mojo
08:32 bc547 sri: didn't know about non portability of absolute paths
08:33 sri hmm... now that i think about ../../ paths in render_static... it might have become too dangerous with multiple public directory support
08:34 tempire I'm a little surprised you let that happen
08:35 sri if i remember correctly there were fights about absolute paths and ../../ ones were a compromise or so
08:35 sri tempire: you let it happen too ;p
08:35 tempire I remember the fights
08:35 tempire just not that abdication
08:35 * tempire points at marcus
08:36 sri marcus: how could you let it happen?
08:37 sri tempire: you're welcome to solve it
08:38 marcus now what?
08:38 marcus WWJD?
08:38 tempire by removing relative paths beyond static->paths?
08:39 tempire what, is J some sort of viking name?
08:39 tempire what would joxer do?
08:39 tempire http://www.xenaville.com/cast/joxer.jpg
08:40 sri i think we could only change it if we consider it a security issue
08:40 sri xena! \o/
08:40 marcus let's just put it in a chroot
08:40 marcus :p
08:40 marcus WWAD?
08:40 marcus (what would apple do)
08:41 marcus oh, chroot is root only :-/
08:42 sri with multi public directory support i'd say it is a serious security problem
08:42 sri but there's an example in the documentation...
08:43 sri i'm not keen on being that bad guy again... so i'll leave the decision completely to you ;p
08:44 tempire that's a change that could damage many an app
08:44 tempire that scares me
08:45 sri maybe it breaks some apps, maybe it protects some
08:48 sri no decision means it stays the way it is
08:49 tempire I explicitly vote for it to remain.
08:50 stephan48 bc547: you migth want to look at the xsendfile mechanism, it allows you to do your auth checks in your app and then delegate the delivery of the files to ap2/whatever other webserver you use
08:54 tempire but I'm also for removing the .. example from the docs.
08:54 tempire so as not to encourage its usage
08:55 tempire I am also for going to sleep
08:55 bc547 stephan48: morbo/hypnotoad is the webserver
08:55 stephan48 you dont have apache2/nginx/lighttp infront=
08:56 stephan48 s/=/?/
08:56 stephan48 then forgett my comment :)
08:56 bc547 stephan48: no.. it is already a backend system
08:57 tempire well.  maybe not.  the only reason to remove it from the docs is for the eventual removal of that functionality
08:58 GitHub90 joined #mojo
08:58 GitHub90 [mojo] kraih pushed 1 new commit to master: http://git.io/CNh7eQ
08:58 GitHub90 [mojo/master] better render_static description - Sebastian Riedel
08:58 GitHub90 left #mojo
08:58 sri i've added a warning
08:59 jeen joined #mojo
09:13 jeen is there 'after_render'-like hook on Mojolicious?
09:18 daxim joined #mojo
09:20 tempire jeen: http://mojolicio.us/perldoc/Mojolicious/#hook
09:21 jeen tempire: is it 'after_dispatch' ?
09:22 fhelmber_ joined #mojo
09:29 jeen I've tried 'after_dispatch', but stash value defined at MyApp::Controller#some_action did not catch up on 'after_dispatch' hook
09:31 GitHub175 joined #mojo
09:31 GitHub175 [mojo] kraih pushed 1 new commit to master: http://git.io/lo4bAg
09:31 GitHub175 [mojo/master] Mozilla WebSockets do not require a prefix anymore - Sebastian Riedel
09:31 GitHub175 left #mojo
09:33 rem_lex| joined #mojo
09:33 jeen oops, I was wrong. Not MyApp::Controller#some_action, but MyApp::Plugin::SomePlugin.
09:35 jeen the stash value is defined by helper on MyApp::Plugin::SomePlugin
09:45 tabbi joined #mojo
11:06 marcus I vote with tempire
11:07 sri hmmmm
11:07 * marcus stuffs tempire into the ballot
11:07 sri https://github.com/languages/Perl # looks like there no perl projects in most watched and forked anymore :o
11:08 marcus owned by projects with tiny amounts of perl?
11:08 sri nope
11:08 marcus gitolite is perl tho
11:08 sri one is 100% shell, another 100% objective-c
11:09 marcus solarized is 43% perl
11:09 marcus (looking at most watched overall)
11:09 marcus sparkleshare is now marked as 53% perl
11:10 sri even says PostgresApp is perl
11:10 marcus spark is the only pure shell one
11:10 sri i don't see any perl in solarized
11:11 sri there is no perl in SparkleShare as far as i can see
11:18 marcus and yet, we're only at 4 % https://github.com/languages
11:20 sri you don't know what else is broken with those stats
11:47 spiros joined #mojo
11:47 spiros Hello
11:48 spiros A question about signed cookies - do they get 'invalidated' upon server restart? I always get an error message that the cookie might be tampered with.
12:35 mire joined #mojo
12:53 Htbaa joined #mojo
12:54 Htbaa In Catalyst I could use chaining to fetch an object (user profile for example) from the database for any given route that was part of the chain. What's the preferred way to do this in Mojolicious? Using a hook? Any examples available?
13:25 jnap joined #mojo
13:33 d4rkie joined #mojo
13:39 inokenty joined #mojo
13:41 gryphon joined #mojo
13:45 tabbi left #mojo
14:04 Htbaa or would a helper be the way to go?
14:05 Htbaa e.g. calling the helper in the controller action to fetch that object. The helper can of course perform a render_not_found when it's not found
14:05 Lucas1 joined #mojo
14:11 sri Htbaa: http://mojolicio.us/perldoc/Moj​olicious/Guides/Routing#Bridges
14:19 Htbaa sri: thanks. Had thought about a bridge but thought it wouldn't be of use since http://mojolicio.us/perldoc/Mojolici​ous/Guides/Routing#Route_to_callback described that the callback wasn't being inherited by nested routes. But a bridge will always execute it?
14:50 vel joined #mojo
15:05 labrown joined #mojo
15:25 berov left #mojo
15:28 Britzel joined #mojo
15:56 GitHub180 joined #mojo
15:56 GitHub180 [mojo] kraih pushed 1 new commit to master: http://git.io/VvZ0Pw
15:56 GitHub180 [mojo/master] fixed small content encoding bug in Mojo::Message - Sebastian Riedel
15:56 GitHub180 left #mojo
15:59 xaka joined #mojo
16:12 GitHub12 joined #mojo
16:12 GitHub12 [mojo] kraih pushed 1 new commit to master: http://git.io/TledkA
16:12 GitHub12 [mojo/master] better synopsis examples for transactions - Sebastian Riedel
16:12 GitHub12 left #mojo
16:18 Leandr joined #mojo
16:36 xaka1 joined #mojo
16:47 arpadszasz joined #mojo
17:35 batman joined #mojo
17:44 xaka joined #mojo
17:45 nich0s joined #mojo
18:02 vel joined #mojo
18:36 sh4|2 joined #mojo
18:36 njlg joined #mojo
18:39 nuba hi folks, just pushed https://metacpan.org/module/​Data::Printer::Filter::JSON to CPAN, supports Mojo::JSON, so you might want to check it out :)
18:40 mire joined #mojo
18:40 sri nuba++
18:52 garu nuba++
18:54 hasan joined #mojo
18:54 hasan hi all. I'm new to mojolicious. and I would like to do my next project in perl. But still the thing I don't get is, how can I use ajay style request in mojolicious?
18:55 hasan I would like to load specific parts on my web application on a e.g. button click.
18:56 hasan s/ajay/ajax
19:03 diegok hasan went too early... :-/
19:04 diegok and I don't even understand his/her question :(
19:16 xaka1 joined #mojo
19:56 fhelmber_ joined #mojo
20:05 Liam`` joined #mojo
20:08 Liam` joined #mojo
20:14 xaka1 joined #mojo
20:56 nich0s joined #mojo
21:20 nich0s joined #mojo
21:45 lukep joined #mojo
22:15 lammel2 joined #mojo
23:38 noganex joined #mojo
23:47 BlueT_ joined #mojo

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary