Index

Show enters and exits. Hide enters and exits.

02:37:07seydarpeace. one love
06:49:15brixenkhaase: why does redmine use RedCloth3 instead of RedCloth?
06:52:10scooprI think it monkey-patches some features to it
06:53:37brixenwell, why not do that with RedCloth?
06:55:15khaasebrixen: no clue, is that an issue?
06:55:42brixenkhaase: well, looking at some of the failures and basically RedCloth3 is pretty crazy code
06:56:13brixenand RedCloth appears to work where RedCloth3 fails to eg replace -some text- with <del>some text</del>
06:56:16dbussinkbrixen: did you look into that jruby security issue a bit more or nog?
06:56:19dbussinkor not?
06:56:31brixendbussink: not after the gist I pasted you
06:56:40brixendbussink: I don't see an issue with rbx
06:56:48brixenbut I don't really understand the issue either
06:56:50dbussinkbrixen: well, it has the same output as jruby
06:56:57khaasebrixen: i could try replacing redcloth3 with redcloth.
06:56:58brixenrbx does not
06:56:59dbussinkbrixen: so that's why i posted it
06:57:12brixendbussink: show me where rbx has the same output as jruby
06:58:04brixenkhaase: well, there must be an rbx bug somewhere if it's working on MRI
06:58:10dbussinkah, wait, looks like rbx replaces something there right?
06:58:12brixenkhaase: finding it is painful
06:58:26brixendbussink: it is clearly matching the <
07:01:00brixenkhaase: so, there is one hang in test:units that I haven't gotten to yet, and I think 12f/2e
07:01:21brixenkhaase: functionals have 6f/1e and integration 1f
07:02:06dbussinkbrixen: this is the output here: https://gist.github.com/f5bee9b7ee536a2ac8ab
07:02:10dbussinkbrixen: with jruby 1.4.0
07:02:27khaasebrixen: cool stuff. i have to fix my database/update rbx, then i'll try running it again.
07:02:59brixendbussink: wat is xss.rb
07:03:03brixener what
07:03:12dbussinkbrixen: that piece of code from the report
07:03:26brixenthat's not what I get
07:03:35dbussinkbrixen: which is here: http://www.jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability.html
07:03:37brixenhttp://gist.github.com/379980
07:03:54brixenI can't understand that description
07:05:19dbussinkbrixen: well, i see different output there in the kcode section
07:06:03brixenthe jruby page says, "If a string contains invalid UTF-8 byte sequences in the (inclusive) range \xC0 to \xFD, the immediately following character will not be matched by a regular expression."
07:06:12brixenbut < is clearly substituted in my gist
07:08:26brixenwell, I should say, the string is processed differently
07:15:18brixendbussink: yeah, there is an issue: http://gist.github.com/380451
07:15:32brixenwhy they couldn't use a simple script to begin with
07:15:59brixensleeps
07:16:46dbussinkbrixen: night!
07:23:26khaasebrixen: see you "tomorrow"
10:26:41sMAshdothi
16:45:13sMAshdotrake rubyspec:update
16:45:18sMAshdotups
16:49:48brixensMAshdot: why are you running that?
16:50:12brixenpoor boyscout
16:50:24brixenheaded to galois talk, bbl...
16:53:46sMAshdotbrixen: following http://rubini.us/docs/getting_started
16:54:14BrianRice-workoh, galois talk!
16:54:51BrianRice-workbrixen: a mini-review upon your return would be appreciated
16:58:10boyscoutCI: rubinius: 1b8ffb9 successful: 3448 files, 13480 examples, 41038 expectations, 0 failures, 0 errors
17:00:53kronos_vanobrixen, what is CodeRay ?
17:08:18Defilerkronos_vano: a syntax highlighting library
17:08:44kronos_vanohm
18:03:47slavaevan: how do you do GC checks?
18:29:50dbussinkslava: evan is on vacation :)
18:30:22slavaah
18:35:55dbussinkslava: should probably ask brixen to know when he'll be back :)
20:47:26rueLLVM 2.7 looks good
20:53:28BrianRice-workyeah the release notes look interesting: http://llvm.org/docs/ReleaseNotes.html#whatsnew