219 posts
Yesterday GitHub suffered a large-scale outage. Microsoft responded that, due to the pandemic, servers in various regions had been stolen. Microsoft also said it is doing everything it can to recover the servers and hopes to retrieve the servers and data as soon as possible.
GitHub Actions is a continuous integration service launched by GitHub in October 2018. I used Travis CI before; yesterday I tried GitHub Actions and found it more powerful with more to play with, so I'll share my first impressions.
Why do I say don't over-rely on or blindly trust unit tests? It starts with a merge request. GitHub's Dependabot keeps your application secure and always up to date, meaning it automatically creates merge requests to change my Maven dependency versions. And so the story begins.
Download sites were very popular several years ago, but because bandwidth and traffic were expensive, many download sites began hotlinking — visitors click download on someone else's page but use my server's traffic, causing huge bandwidth theft. So hotlink protection is a required course for download sites.
When using the IDEA development tool, sometimes a Spring project's config files application.yml or bootstrap.yml aren't recognized properly — the icon isn't the green little leaf, causing the project to fail to start. At this point we need to manually check IDEA's configuration to fix it.
When using MyBatis, IDEA prompts 'Could not autowire. No beans of 'XXXMapper' type found.' and draws a red squiggly line on the mapper class. The actual reason is that you forgot to add the @Repository annotation to the mapper.
Every system has a login feature, and it's an indispensable battleground that developers, users, and even hackers all target first. The login logic has been discussed a lot online, but there's one pitfall beginners easily forget: the message returned in the login or forgot-password feature reveals whether an account exists.
The well-known game company EA (Electronic Arts) made a splash on GitHub, open-sourcing part of the source code of two games in the Command & Conquer series! The two games are: Tiberian Dawn and Red Alert.
The .iml file is IntelliJ IDEA's project configuration file, containing some configuration info about the current project. Sometimes after importing a project you'll find that the .iml file isn't generated automatically, causing the project structure to not display properly. In that case we need to generate the .iml file manually.
Fastjson has a remote code execution vulnerability; the restriction of the autotype switch can be bypassed, and a chained deserialization attacker can craft a deserialization exploit chain, ultimately achieving remote command execution. This vulnerability itself cannot bypass Fastjson's blacklist restriction; it needs to be combined with a deserialization exploit chain not on the blacklist to complete the full exploitation.
