Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Aaron Gibralter

Aaron Gibralter

Not a member

Aaron Gibralter's latest activity

Tuesday, April 05 2011
6634 Rails/Rack inconsistency about `:expires_after`/`:expires` cookie option. was updated in Ruby on Rails
Sunday, March 27 2011
6634 Rails/Rack inconsistency about `:expires_after`/`:expires` cookie option. was updated in Ruby on Rails
  • Aaron Gibralter
    Aaron Gibralter commented at 9:10 PM

    What's more -- Rack seems to expect the :expires option as a Time object. I keep getting can't clone Fixnum (TypeError) because I have :expires in my environmen...
  • Aaron Gibralter
    Aaron Gibralter created the ticket at 8:48 PM

    Rails seems to indicate that it accepts a :expires_after option for cookies in the session setup. However, it uses Rack's Rack::Utils.set_cookie_header! method....
Monday, February 14 2011
3134 MemCacheStore allows for arbitrary client generated session_ids? was updated in Ruby on Rails
  • Aaron Gibralter
    • State changed from stale to open
    by Aaron Gibralter at 2:54 PM

    oops forgot: [state:open]
  • Aaron Gibralter
    Aaron Gibralter commented at 2:53 PM

    Does anyone else think it makes sense for Rails to HMAC the session_ids it creates with a timestamp and a secret? This way people would not be able to brute for...
3238 mem_cache_store_test has flawed test was updated in Ruby on Rails
  • Aaron Gibralter
    Aaron Gibralter commented at 2:51 PM

    So I just took another look at this.

    def test_prevents_session_fixation
  with_test_route_set do
    get '/get_session_value'
    assert_response :success
    ...
2644 Memcache session store + litespeed (and i think passenger) was updated in Ruby on Rails
Saturday, October 30 2010
5588 Integrate support for Dalli was updated in Ruby on Rails
2644 Memcache session store + litespeed (and i think passenger) was updated in Ruby on Rails
  • Aaron Gibralter
    Aaron Gibralter commented at 12:01 AM

    Rohit, it doesn't seem like Mike's patch addresses the session store... I updated that ticket though to raise the possibility.

    I think that if they do decide to...