Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
Blake Niemyjski
@niemyjski
gets translated into a time range that changes all the time
Sander Rijken
@srijken

Think we can use exceptionless to collect these?
https://www.veracode.com/blog/2014/03/guidelines-for-setting-security-headers

https://bugs.webkit.org/show_bug.cgi?id=100892
The report is JSON and is generated using the same facility as for the X-WebKit-CSP-Report-Only header. A sample might be:

    { "xss-report": {
        "request-url": "http://example.com/vulnerable-page?q=<script>alert(/xss/)</script>",
        "request-body": ""
    }}
could be useful for other report endpoints that are specified in headers
public key pinning (https://developer.mozilla.org/en-US/docs/Web/Security/Public_Key_Pinning)
Content Security Policy
Eric J. Smith
@ejsmith
@niemyjski yeah, gotta figure out a way to keep the cache key steady, eh?
@srijken you want to add them to the events?
Blake Niemyjski
@niemyjski
@ejsmith yeah, and I don’t think it’s possible
Matt Oswald
@moswald
I'm going to update my PR this morning - should I just remove the old constructor that I marked as Obsolete?
Eric J. Smith
@ejsmith
@moswald we have been bad about making breaking changes.
My justification is that I am waiting for the library to be more popular before I worry about them too much.
Matt Oswald
@moswald
:+1:
works for me
Eric J. Smith
@ejsmith
might be a dumb justification. :-)
Matt Oswald
@moswald
makes your life simpler
gets things out quicker
Eric J. Smith
@ejsmith
yeah, I’m just trying to make things better and most of the breaking changes have been small things.
I guess if we were following semver then we would still be like 0.4.1
instead of 4.0
didn’t know this until the other day, but apparently if you are under 1.0 then all breaking change rules are off.
Blake Niemyjski
@niemyjski
can we all comment on this: elastic/elasticsearch#17511
Eric J. Smith
@ejsmith
if you want to
it really isn’t that hard to do from our end, but does feel like they should support it
Blake Niemyjski
@niemyjski
yeah I agree
Bill Henning
@BillHenning
https://blogs.msdn.microsoft.com/visualstudio/2016/04/08/previewing-salsa-javascript-language-service-visual-studio-15/
Eric J. Smith
@ejsmith
works pretty good
yeah, they are using that in VSCode already
Mitchell Kutchuk
@Mitch528
Hello. I'm trying to setup Exceptionless self-hosting with URL rewrite, but when I try to sign in I get /api/v2/auth/login 405 (Method Not Allowed).
Sander Rijken
@srijken
@ejsmith yeah, adding to events would be cool. It’s something that’s wrong / exceptional case, and you want to be notified about it, so it could be a fit?
@ejsmith exceptionless/Exceptionless.Net#91
Eric J. Smith
@ejsmith
Awesome!
Blake Niemyjski
@niemyjski
@Mitch528 hey
have you followed the troubleshooting guide in the self hosting wiki?
Please make sure you have .net 4.6.1 instaleld and you are using the elasticsearch.yml file
Mitchell Kutchuk
@Mitch528
@niemyjski Yes, I have .NET 4.6.1, elasticsearch.yml is also there. I used the chocolatey install.
Mitchell Kutchuk
@Mitch528
It does work without the URL rewrite though.
Blake Niemyjski
@niemyjski
Hmm I'd try reinstalling rewrite rules, running all server updates and a reboot
What are your settings in the app.config.js and web.config
Relating to rewrite rules
Eric J. Smith
@ejsmith
Maybe because of redirect to SSL?
Mitchell Kutchuk
@Mitch528
Here's my web.config: https://gist.github.com/Mitch528/eee2569f1d456b68136cf8cc442f7c17 and app.config.js https://gist.github.com/Mitch528/d215cb6a6cdee4f5662715c46dccdcae
I'll try reinstalling rewrite and do updates
Eric J. Smith
@ejsmith
Is it trying to redirect to SSL and you don't have SSL setup?
Blake Niemyjski
@niemyjski
nope
This message was deleted
hmm that’s seems odd. let me know if installing the rewrite plugin fixes it
Blake Niemyjski
@niemyjski
@srijken I’m going to test the dedup tomorrow and push out a release and finish up the server side stats
if you have any objections let me know :)
Sander Rijken
@srijken
@niemyjski check
Blake Niemyjski
@niemyjski
ok
Blake Niemyjski
@niemyjski
how was everyones weekend?