News
The tale of an XSS in Phlex (CVE-2024-32463) | Greg Molnar
Phlex is a Ruby gem for building HTML components. Even though the HTML specification permits the usage of the javascript scheme in the href attribute of an anchor tag, Phlex doesn’t permit it to prevent an accidental XSS. When I had an initial loo...
Super Fast Rails – A promise given is a debt - RorVsWild
Before reading this one, you should read the previous article to understand fully.If you don’t have a few extra minutes, here is a summary: I was describing a new revolutionary gem that could automatically optimize any Rails app. It could create m...
Let there be docs! A documentation-first approach to Rails API development
We examine approaches to API documentation, with a case for why the documentation-first approach is beneficial, plus, we'll not only introduce a new Ruby gem, Skooma, that will be a revelation for those who are ready to follow this path, you can a...
Frontend Ruby with Glimmer DSL for Web by Andy Maleh (Montreal.rb Ruby Talk 2024/03) - YouTube
Rubyists would rather leverage the productivity, readability, and maintainability benefits of Ruby in Frontend Web Development than JavaScript to cut down development cost and time by half compared to using popular yet inferior JavaScript framewor...
RubyGems is not vulnerable to the xz/liblzma backdoor - RubyGems Blog
The past few days have seen the security world focused on the revelation of the xz/liblzma backdoor. For more background, see this early writeup of the issue, this GitHub Gist, this detailed timeline, and the official detail page for CVE-2024-3094...
Aaron Patterson ✅: "Worked more on optimizing dele…" - Mastodon
Worked more on optimizing delegates with @jhawthorn today. There are more edge cases that I thought there would be (of course), but I'm testing it in work CI rn. Anyway, I really hope we can land this in Ruby 3.4 (I'm confident we can).
Introducing props_template: A Jbuilder alternative
I like Jbuilder. It’s been part of every Rails project every time I run rails new and the first thing I reach for when I want to create JSON responses. It’s as synonymous with JSON as ERB is with HTML.But I wanted a version of Jbuilder that had la...
Visit our blog
