Random Note 2024-06-11
New vulnerability of IntelliJ-based IDEs
The Details
On the 29th of May 2024 we received an external security report with details of a possible vulnerability that would affect pull requests within the IDE. In particular, malicious content as part of a pull request to a GitHub project which would be handled by IntelliJ-based IDEs, would expose access tokens to a third-party host. The CVE ID assigned to this vulnerability is CVE-2024-37051.
In addition to assessing the issue and starting work on a resolution, we also immediately contacted GitHub to assist us with mitigation. Please note that due to these mitigation measures, the JetBrains GitHub plugin in older versions of JetBrains IDEs may no longer work as expected.
What is required of you
- OAuth Integration Settings: go to Applications → Authorized OAuth Apps and revoke access for the JetBrains IDE Integration application.
- Personal Access Token Settings: go to the Tokens page and delete the token issued for the plugin. The default token name is IntelliJ IDEA GitHub integration plugin, but you may be using custom names as well.
WWDC 24
Rsdoctor
Build Analyzer for Rspack and Webpack
Fetures: https://github.com/web-infra-dev/rsdoctor?tab=readme-ov-file#-position
Cuteness
It's true.
カーネル／VM探検隊
I've joined! (offline attendance)
Nuxt v3.12 (v4 opt-in)
export default defineNuxtConfig({
future: {
compatibilityVersion: 4,
},
})
- nuxt scripts https://scripts.nuxt.com/
- nuxt/a11y (WIP)
hy-phen-ate (by typst)
hyphenation:
the use of the symbol -, joining two words or two parts of a word