News
From a Lorry Driver to Ruby on Rails Developer at 38
Most traditional interviews are focused on celebrities or popular personalities. However, I am more interested in interviews with hidden gems, unknown figures doing solid work, folks overcoming challenges just to be on the same playground as every...
Release 2.0.0 / 2024-04-17 · sparklemotion/sqlite3-ruby
This is a major release which contains some breaking changes, primarily the removal oflong-deprecated functionality. Before upgrading, please make sure to address deprecation warningsemitted from your application using sqlite3-ruby v1.7.x.RubyThis...
The tale of an XSS in Phlex (CVE-2024-32463) | Greg Molnar
Phlex is a Ruby gem for building HTML components. Even though the HTML specification permits the usage of the javascript scheme in the href attribute of an anchor tag, Phlex doesn’t permit it to prevent an accidental XSS. When I had an initial loo...
Super Fast Rails – A promise given is a debt - RorVsWild
Before reading this one, you should read the previous article to understand fully.If you don’t have a few extra minutes, here is a summary: I was describing a new revolutionary gem that could automatically optimize any Rails app. It could create m...
Let there be docs! A documentation-first approach to Rails API development
We examine approaches to API documentation, with a case for why the documentation-first approach is beneficial, plus, we'll not only introduce a new Ruby gem, Skooma, that will be a revelation for those who are ready to follow this path, you can a...
Frontend Ruby with Glimmer DSL for Web by Andy Maleh (Montreal.rb Ruby Talk 2024/03) - YouTube
Rubyists would rather leverage the productivity, readability, and maintainability benefits of Ruby in Frontend Web Development than JavaScript to cut down development cost and time by half compared to using popular yet inferior JavaScript framewor...
RubyGems is not vulnerable to the xz/liblzma backdoor - RubyGems Blog
The past few days have seen the security world focused on the revelation of the xz/liblzma backdoor. For more background, see this early writeup of the issue, this GitHub Gist, this detailed timeline, and the official detail page for CVE-2024-3094...