<bsb>
Can anyone recommend some secure coding guidelines for ocaml? I've googled around a bit, but not really found anything.
dsheets has joined #mirage
dsheets has quit [Client Quit]
dsheets has joined #mirage
dbuenzli has left #mirage [#mirage]
dbuenzli has joined #mirage
agarwal1975 has quit [Quit: agarwal1975]
djs55 has quit [Quit: Leaving.]
djs55 has joined #mirage
thomasga has joined #mirage
agarwal1975 has joined #mirage
thomasga has quit [Quit: Leaving.]
mort___ has joined #mirage
dbuenzli has quit [Ping timeout: 255 seconds]
agarwal1975 has quit [Quit: agarwal1975]
mort___ has quit [Quit: Leaving.]
mort___ has joined #mirage
agarwal1975 has joined #mirage
dbuenzli has joined #mirage
mort___ has quit [Quit: Leaving.]
<dbuenzli>
Is there a way of automatically setting the upstream remote when you fork a project on github or is their workflow really as broken as I think ?
<noddy>
well it fixed the directory traversal at least
<avsm>
the right fix is to run path through
<avsm>
(Uri.resolve "" (Uri.of_string "") uri)
<avsm>
to remove ..
<noddy>
it's the "bsd fix". that how they fix the suspend problem, i hear.
<hannes>
..deployed
<dbuenzli>
No Server Error !
<hannes>
avsm: but then we still need to validate that the path is in a subdir of <whereever web is>, don't we?
agarwal1975 has quit [Quit: agarwal1975]
<avsm>
hannes: sort of
<avsm>
let path = Uri.of_string "/foo/../../../etc/passwd";;
<avsm>
(Uri.resolve "" (Uri.of_string "") path);;
<avsm>
Uri.t = /etc/passwd
<avsm>
so you need to make sure the Uri input isnt relative though
<noddy>
guys, i'll be leaving my combat post now
<hannes>
u enjoy ur birthday, noddy! great work! :D
<noddy>
*high 5*
<avsm>
noddy: woot!
dbuenzli has quit [Ping timeout: 240 seconds]
tlockney_away is now known as tlockney
yomimono has joined #mirage
thomasga has joined #mirage
<avsm>
hannes: noddy: btw mail mirageos-devel about the release/blog too (we never quite remember to actually post our blogs on the list, and lots of people miss them)
<avsm>
i always find it a bit odd to post my own blog posts, but I think the benefits outweight the awkwardness
<avsm>
*post my => email my
<bsb>
Oh, it's at night that it lights up.
<hannes>
will do. also ocaml list, I believe
<avsm>
hannes: and the mitls/sewell thread useful too
thomasga has quit [Quit: Leaving.]
<hannes>
avsm: uhm, we're unix socket api, no tcp/ip from mirage iirc
<avsm>
hey bsb
<avsm>
hannes: context?
<avsm>
bit distracted by the brazil germany match :P