/srv/irclogs.ubuntu.com/2013/09/05/#launchpad-dev.txt

=== jtv1 is now known as jtv
wgrantStevenK: ಠ_ಠ04:30
StevenKUnicode failure04:32
StevenKBut I can guess the intent04:32
wgrant1) Fix your IRC/terminal configuration to be less broken when receiving Unicode04:33
wgrant2) Fix your MP :)04:33
StevenK[14:33] -!- Irssi: Uptime: 99d 4h 39m 41s04:33
StevenKirssi/screen loses its mind after about 40 days WRT Unicode04:34
wgrantA likely story.04:34
StevenKwgrant: Fix my MP how?04:34
wgrantಠ_ಠ04:35
StevenKwgrant: I seem to be missing my mind reading device. Secondly, did you manage to actually break the new auditor stack or did you get fully distracted by buildd-manager?04:37
wgrantI only ಠ_ಠ without elaboration in a very restricted set of circumstances04:38
wgrantI'd examine your diff for obvious security vulnerabilities.04:38
StevenKwgrant: I can think of two. person may not be a JSON blob of a IPerson, and we should escape the comment04:40
wgrant+ suffix = '-' + person.name;04:40
wgrant+ '<a href="' + person.web_link + '">' + person.display_name +04:40
wgrant+ ' (' + person.name + ')</a>');04:40
wgrant+ header = "Comment by " + personlink + " on " + date + ".";04:40
wgrant+ '<tr id="ict-' + middle + '-header" class="ict-header">' +04:40
wgrant+ '<div id="inlinecomment-' + middle + '">' +04:40
wgrant+ '<tr id="ict-' + middle + '"><td></td><td>' +04:40
wgrant+ '<span>' + comment + '</span></td></tr>');04:41
wgrantAt a quick glance.04:41
StevenKI wasn't aware of a person formatter available to JS04:43
wgrantThere probably isn't one.04:43
wgrantBut the lack of one does not excuse multiple trivial XSS vulnerabilities.04:43
wgrantThough existing code such as +sharing and the bug subscription widget generate person links somehow.04:44
=== tasdomas_afk is now known as tasdomas
wgrantStevenK: https://code.launchpad.net/~wgrant/launchpad/bug-1221002/+merge/184030 might make SlaveScanner.scan() a bit more understandable.08:01
wgrantAnd even less inconsistent :)08:01
wgrantcheckCancellation is still sick and wrong, but that's for another branch08:02
wgrantI suspect I'll need to add a cancellation flag to BuildQueue08:05
wgrantIt's currently all rather messy, as the top level buildd-manager code knows about build.status.08:05
StevenKwgrant: Sorry, I'll look tomorrow morning.08:44
wgrantStevenK: Sure, no rush08:46
=== tasdomas is now known as tasdomas_afk
=== tasdomas_afk is now known as tasdomas
=== deej` is now known as deej
=== tasdomas is now known as tasdomas_afk
=== Ursinha is now known as Ursinha-afk
=== Ursinha-afk is now known as Ursinha

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!