Tip:
Take full-size screenshots of websites.
1. Open Dev Tools
2. Right-click on the `<body>` tag, and select "Node Screenshot"
Works in both Chrome and FF.
We've published an analysis of the #Spring4Shell RCE to help provide better "facts" about what we know so far. There are 2 vulnerabilities and people are confusing them.
Note: This post is Markdown on GitHub if you'd like to add anything (link in thread).
https://t.co/So2tbUCE2w
@delabassee @sundararajan_a AFAIK This only works with Zsh (it creates and deletes a tmp source file behind the scenes):
java --source 9 =(<<< 'class C {public static void main(String[] a){System.out.print(Runtime.version());}}')
@delabassee @sundararajan_a Here are a few more options that work with Bash:
jshell PRINTING -<<<'print(Runtime.version())'
(. $JAVA_HOME/release&&echo $JAVA_VERSION)
# Source all release variables into your script
. $JAVA_HOME/release
📝 How to win at CORS! Not just how CORS works, but also the history and reasons behind it.
Includes the hot new app everyone's talking about: The CORS playground!
https://t.co/EFGu3JeCq6
#Distributed#transaction patterns for #microservices compared https://t.co/oaAOiwNU6Z
A good solid reference for anybody designing distributed systems 🎓
@gatirosho You're asking how to do pessimistic-locking. Eventually-consistent systems have different patterns to strongly-consistent systems. There's no pessimistic-locking for checks that guarantee there'll be enough money when deposited. Think in terms of eventually-consistent patterns.
@gatirosho My advice, don't use microservices/event-sourcing/CQRS unless you have experience on your team (for most projects they're too heavyweight, and they're easy to get wrong). But, consider the Saga pattern https://t.co/sv3SJFM4Bg. Think of commands more like a check that can bounce.
Try Grazie, the new plugin for IntelliJ IDEA, to check the spelling, grammar, and style of your natural language constructs: string literals, comments, commit messages, readme files, and any other text in over 15 languages. Read the blog post for details: https://t.co/lTv0Z4p1JE
#OpenAPI extension for @code now includes built-in Security Audit. This static analysis includes about 200 different security checks run against your @OpenApiSpec API contract in #VSCode & provides detailed report. Supports both v2 & v3, #YAML & #JASON. https://t.co/8qGSmiPKqD
#IntelliJIDEA's structural search & replace (SSR) action lets you search for a particular code pattern or grammatical construct in your code.
Here's a quick example to find variables defined using upper case in your codebase.
https://t.co/vsD91zgB0N
#DriveToDevelop