The web in a box - a next generation web framework for the Perl programming language

IRC log for #mojo, 2016-08-22

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:33 Pierre joined #mojo
00:54 meshl joined #mojo
01:33 Pierre joined #mojo
01:51 Pierre joined #mojo
02:09 noganex_ joined #mojo
02:37 sri nic: and how do you deal with the security issues caused by validating only some parts of the Mojo::UserAgent input?
02:37 sri your example is actually a very good one
02:38 sri i'm guessing you're talking about web scraping, and that if the protocol of every url is checked, you can pass them along pretty much arbitrarily
02:39 sri now, how do you prevent the user from assuming other input values are also validated?
02:39 sri like headers
02:40 Kripton joined #mojo
02:40 sri $ua->get('file://etc/passwd' => {'Content-Type' => "foo\nbar\nbaz"});
02:40 sri if the url triggers an error, why doesn't the header?
02:41 sri it's arguably worse
02:41 sri results in broken http
03:20 Pierre joined #mojo
03:26 prajith joined #mojo
03:31 Pierre joined #mojo
04:44 prajith joined #mojo
06:13 batman sri: Thanks for submitting :)
06:19 inokenty-w joined #mojo
06:40 irctc520 joined #mojo
06:53 mbudde joined #mojo
06:54 cpan_mojo Mojolicious-Plugin-SPNEGO-0.2.4 by OETIKER https://metacpan.org/release/OETIKER/Mojolicious-Plugin-SPNEGO-0.2.4
07:17 Vandal joined #mojo
07:17 AndrewIsh joined #mojo
07:39 dod joined #mojo
07:44 dod joined #mojo
07:45 Pierre joined #mojo
07:45 jontaylor joined #mojo
08:29 cuechan joined #mojo
09:08 osfabibisi joined #mojo
09:27 mvorg joined #mojo
09:30 jasanj joined #mojo
09:32 jasanj hi, i have a question for mojo use with nginx, my conf is like
09:32 jasanj location /machine_status/ {
09:33 jasanj proxy_pass http://myhost:3000/;
09:33 jasanj }
09:34 batman jasanj: maybe your answers can be found here: https://metacpan.org/pod/distribution/Mojolicious/lib/Mojolicious/Guides/Cookbook.pod#Nginx
09:37 jasanj i have several link generated by helper function url_for, which like '/du?disk=xx', but i really want '/machine_status/du?disk=xx'
09:38 jasanj i debug my web site without nginx successfully, but put it behind nginx it will casuse those url(relative url) problem
09:38 jasanj hope you could understand my description :)
09:38 batman jasanj: then you want https://metacpan.org/pod/Mojolicious::Plugin::RequestBase
09:38 jasanj batman: thanks for quick response, i'm looking
09:39 batman you're welcome :)
09:40 batman it's written by marcus, but the latest release is mine, so any feedback regarding the documentation is welcome.
09:49 mgrimes_ joined #mojo
10:03 mfontani Another option, I guess, is - in nginx, before that "proxy_pass": rewrite ^/machine_status(.*)$ $1 break;
10:15 jasanj batman: M:P:RequestBase is worked for me, thank you !
10:15 meshl joined #mojo
10:16 jasanj mfontani: i also tried your solution, not worked for me
10:16 jasanj still thanks
10:26 mfontani Right, neglected a: proxy_set_header X-Forwarded-Base http://..../machine_status/;
10:26 mfontani probably better to use the ::RequestBase as it seems to take care of it better
10:33 batman jasanj: awesome!
10:48 Pierre joined #mojo
11:05 tchaves joined #mojo
11:08 tchaves joined #mojo
11:12 kes joined #mojo
11:13 tchaves joined #mojo
11:16 mbudde1 joined #mojo
11:16 dod joined #mojo
11:47 Kripton joined #mojo
11:58 jontaylor joined #mojo
12:04 good_news_everyon joined #mojo
12:04 good_news_everyon [mojo] kraih pushed 2 new commits to master: https://git.io/v6yW2
12:04 good_news_everyon mojo/master 4db3b17 Akron: Minor typo
12:04 good_news_everyon mojo/master 997d21f Sebastian Riedel: Merge pull request #992 from Akron/master...
12:04 good_news_everyon left #mojo
12:19 meshl joined #mojo
12:19 nic On cpan there are currently 509 modules with names beginning 'Mojolicious::Plugin::'
12:23 nic which is less than half the number of cpan modules that have 'sex' in the title
12:23 nic just saying
12:26 cstamas joined #mojo
12:38 asarch joined #mojo
12:39 perlpilot joined #mojo
12:41 gizmomathboy joined #mojo
13:00 neilhwatson joined #mojo
13:01 Pierre joined #mojo
13:03 dod joined #mojo
13:16 jberger Moosex doesn't help there
13:16 nic :)
13:17 jberger I might even have one or two of those
13:18 jberger Ok so i think metacpan is trolling me
13:18 jberger Type "Joel Berger" into the search. Pick authors. Click I'm feeling lucky
13:20 genio hahaha
13:20 jberger INORITE!!
13:20 genio joel berger is batman!
13:21 jberger \o/
13:21 batman huh?
13:21 batman haha!
13:21 batman genio: that was supposed to be a secret.
13:21 batman :)
13:22 marty joined #mojo
13:23 nic pwned
13:23 Vandal16455 joined #mojo
13:32 ptolemarch joined #mojo
13:43 marty_ joined #mojo
13:45 PryMar56 joined #mojo
14:20 mcsnolte joined #mojo
14:39 mpapec_ joined #mojo
14:53 inokenty joined #mojo
14:57 mpapec_ joined #mojo
14:58 mpapec_ joined #mojo
14:59 mpapec_ joined #mojo
15:01 mpapec_ joined #mojo
15:01 mpapec_ joined #mojo
15:03 mpapec_ joined #mojo
15:09 bwf joined #mojo
15:36 prajith joined #mojo
16:03 AirDisa joined #mojo
16:47 dod joined #mojo
17:14 sri now that you mention it, i don't think i've ever seen jberger and batman in the same room
17:14 sri busted!
17:14 * jberger wants another mojoconf
17:15 jberger unrelated: some reconnect/resubscribe logic: https://github.com/jberger/Mojolicious-Plugin-Multiplex/commit/97f2c9b4d57354c661ea696d5bc1e2a4bc6df4c1
17:15 jberger testing this thing just sucks
17:15 jberger Phantom doesn't have true websockets yet
17:33 laidback_01 joined #mojo
17:39 Kripton joined #mojo
17:49 ilbot2 joined #mojo
17:49 Topic for #mojo is now 🍩 nom nom | http://mojolicious.org | http://irclog.mojolicious.org | http://code-of-conduct.mojolicious.org | Overwatch!
18:25 meshl joined #mojo
18:26 bwf joined #mojo
18:44 Pierre joined #mojo
18:47 martin joined #mojo
19:11 jberger ok well for better or for worse
19:11 jberger here goes
19:12 cpan_mojo Mojolicious-Plugin-Multiplex-0.01 by JBERGER https://metacpan.org/release/JBERGER/Mojolicious-Plugin-Multiplex-0.01
19:46 Pierre joined #mojo
19:51 mishanti1 And we are _finally_ done migrating our stuff to a modern(-ish) version of Mojo.
19:51 mishanti1 And new(-ish) perl.
19:52 mishanti1 Already seeing better hw-utilization in our graphs.
19:54 mpapec jberger: re: EV; I've thought you know everything ;)
19:55 mpapec and perhaps tried to resolve it without bothering the author :)
19:59 jberger mishanti1++
19:59 jberger mpapec: hehe
20:03 mpapec btw, I did multiplexing via websockets
20:04 mpapec and what I did are private nodes and rooms for messages
20:04 mpapec is there more than that to multiplexing?
20:06 jberger ummm, I'm not sure that those concepts are necessarily related
20:06 jberger say I wanted a stock ticker and a chat on a single page app
20:06 mpapec yes, that covers it
20:07 mpapec imo, that should be two kind of events
20:08 jberger right, but they can be on the same websocket
20:08 jberger if you appropriately dispatch the messages to the correct subscribers
20:08 jberger and add metadata to the messages to allow you to do that
20:09 mpapec ["ticker", {..}, "chat", {..}] ?
20:10 mpapec using one ws.. https://gist.github.com/mpapec/3b8d9e587cd0642f9809d358ddbab14a
20:12 jberger sure, you can roll your own protocol, it isn't that hard to do
20:12 mpapec just wondered what I'm missing in the bigger picture
20:12 jberger the selling feature of my implementation is that each subscription behaves as if it were a websocket, so that your consumers don't have to know that you are multiplexing
20:13 jberger as proposed here:
20:13 Grinnz_ jberger: typo in synopsis, "multoplex" :P
20:13 jberger https://www.rabbitmq.com/blog/2012/02/23/how-to-compose-apps-using-websockets/
20:14 jberger Grinnz_: thanks, fixed in git
20:15 jberger mpapec: also, I provide the event dispatcher for the server side
20:15 jberger so all you have to do is wire up the events on the server side as your app sees fit
20:15 Grinnz_ jberger: you seem to have turned README.pod into ::Multiplexer in that commit also :P
20:15 jberger I'm not saying mine is the only way or even the best
20:15 jberger ergh really?
20:16 jberger force pushed
20:17 mpapec ah, so that could be abstraction on top of socket.io
20:17 mpapec at least for the client side
20:17 jberger for the record, I tried to build a socket.io client
20:17 jberger they have no spec document whatsoever
20:18 jberger and reading through the server and client codes it both (a) seems like they just make it up as they go (message types are very inconsistent between implementations/versions) and (b) not done with the intention of 3rd party contribution
20:19 jberger plus socket.io has all kinds of abstraction that was handy in the pre-websocket days
20:19 mpapec yes and yes
20:19 jberger but now that flash is all but removed from browsers that back compat is much more liability than utility
20:19 mpapec these are features of js community
20:19 mpapec yep
20:21 mpapec do you have example how multiplexing should be used on mojo and alicent side?
20:21 mpapec client*
20:27 jberger there is a tiny example in the dist
20:27 jberger https://github.com/jberger/Mojolicious-Plugin-Multiplex/blob/master/ex/vue_chat.pl
20:27 jberger and remember, this is SERIOUSLY early code
20:29 mpapec tnx
20:35 cuechan joined #mojo
20:35 mvorg joined #mojo
21:04 batman joined #mojo
21:23 PryMar56 joined #mojo
21:30 mpapec_ joined #mojo
21:31 mpapec_ left #mojo
22:26 marty joined #mojo
22:31 asarch joined #mojo
22:34 cuechan_ joined #mojo
23:06 sri Grinnz_: reinhardt is surprisingly fun to play
23:06 Grinnz_ bring me another!!
23:07 sri guess my mains are reinhardt, 76 and tracer
23:07 sri 100% german power!
23:07 Grinnz_ i still have trouble with reinhardt sometimes, it's very tough to balance shielding and going offensive
23:07 Grinnz_ it depends highly on your team too
23:08 Grinnz_ but when everything lines up for your ultimate... reinhardt dominates :)
23:08 Grinnz_ or when people stand in your hammer swing!
23:09 sri yea, ultimate and charge are so much fun
23:09 sri 20% on fire with reinhardt :) https://www.overbuff.com/players/pc/kraih-2445
23:12 sri i started out shielding a lot more, but going berzerk killing everything that moves results in more wins
23:12 sri ¯\_(ツ)_/¯
23:13 Grinnz_ heh
23:13 Grinnz_ also fire strike is way more powerful than it looks
23:14 sri indeed
23:14 Grinnz_ 100 damage, penetrates barriers and enemies
23:15 sri also starting to get reactive shielding, to avoid team wipes from dva bombs and the like
23:16 Grinnz_ shielding the dva ult was tough to get used to, it doesnt feel like it will work at first
23:17 Grinnz_ i noticed in pro matches though, they like to knock rein out of his shield just before it blows up :)
23:17 Grinnz_ with a flashbang, or another rein charging
23:18 sri tranq dart :(
23:18 sri the bane of my reinhardt existence
23:19 Grinnz_ hehe
23:20 sri you have no idea how much better quick play is on us than eu
23:21 Grinnz_ quickplay actually improved since they stopped letting us in competitive mode imo
23:22 sri not that i noticed
23:23 sri little sad how obvious the flaws in overwatch become once you played a few games
23:24 sri good flanking is not rewarded at all, i can distract half a team for minutes, and in the stats it will look like i sucked
23:30 Grinnz_ indeed, the stats have never reflected distraction
23:31 Grinnz_ but that's one of the arguments why you shouldn't get to see your teammates' stats, at least not during the game
23:39 sri oh hey, android 7.0 is out
23:39 * sri updates
23:47 mvorg joined #mojo
23:48 Pierre joined #mojo
23:59 jontaylor joined #mojo

| Channels | #mojo index | Today | | Search | Google Search | Plain-Text | summary