Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert #873 (adding better_errors gem) #878

Merged
merged 1 commit into from
Feb 2, 2018
Merged

Conversation

cllns
Copy link
Member

@cllns cllns commented Dec 21, 2017

Thanks to @igneus for pointing out a security vulnerability in the better_errors gem: 46de8b1#commitcomment-26418678

It looks like this issue has not been fixed in better_errors: BetterErrors/better_errors#350

@cllns cllns changed the base branch from master to develop December 21, 2017 19:59
@cllns cllns changed the title Revert #873 Revert #873 (adding better_errors gem) Dec 21, 2017
@davydovanton
Copy link
Member

davydovanton commented Jan 24, 2018

Hey, sorry for my delay. I know about this problem (check this lightning talk).

I think we can introduce simple DNSRebinding middleware for hanami apps for fixing it on our side for all hanami devs. WDYT?

I mean something like this:
screenshot 2018-01-24 17 51 01

@davydovanton
Copy link
Member

@cllns after discussion with @jodosha we want to build hanami-webconsole gem with full better errors integration and DNC protections. I think we need to drop all better error integration from hanami/hanami now, that's why let's merge this PR 👏

@AlfonsoUceda AlfonsoUceda added this to the v1.2.0 milestone Feb 2, 2018
@AlfonsoUceda
Copy link
Contributor

👍 so let's merge this PR

@AlfonsoUceda AlfonsoUceda merged commit e38edbc into develop Feb 2, 2018
@AlfonsoUceda AlfonsoUceda self-assigned this Feb 2, 2018
@AlfonsoUceda AlfonsoUceda deleted the revert-better-errors branch February 2, 2018 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants