dkasak

From 3c58f86d6b025a0be2d886d45123d44538e35f84 Mon Sep 17 00:00:00 2001
From: Denis Kasak <dkasak@termina.org.uk>
Date: Sat, 12 Sep 2020 17:20:28 +0200
Subject: [PATCH] Fix dependencies and several other issues.

- Fix dependencies by removing some stale ones and adding missing ones.
  The list was sourced from the requirements.txt file from upstream.
- Move python-pytest to makedepends.
- Update post-install message to mention the new location for API keys
  in /etc and to enumerate all APIs requiring keys.

dkasak

diff --git a/.SRCINFO b/.SRCINFO
index e2983e4..b1a3ea0 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -5,25 +5,12 @@ pkgbase = python-censys
 	url = https://github.com/censys/censys-python
 	arch = any
 	license = Apache
-	makedepends = python
 	makedepends = python-setuptools

dkasak

setTimeout(function() {
    Java.perform(function() {

        var TrustManagerImpl = Java.use('com.android.org.conscrypt.TrustManagerImpl');

        TrustManagerImpl.verifyChain.implementation = function(untrustedChain,
            trustAnchorChain, host, clientAuth, ocspData, tlsSctData) {
            return untrustedChain;
        }
    });

dkasak

diff --git a/PKGBUILD b/PKGBUILD
index ce46d58..bcd9e0d 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -7,22 +7,28 @@ pkgdesc="Chinese text-to-speech (TTS) software for Cantonese, Mandarin, Zhaoan H
 arch=('i686' 'x86_64')
 url="http://www.eguidedog.net/ekho.php"
 license=('GPL')
+makedepends=('automake' 'autoconf')
 depends=('libpulse' 'lame' 'festival' 'ncurses' 'espeak')

dkasak

--- ../configure.ac.orig	2020-02-19 13:10:41.419383896 +0100
+++ configure.ac	2020-02-19 14:14:36.189197818 +0100
@@ -106,9 +106,20 @@
           [AC_MSG_FAILURE([ncurses test failed])],
           [])
 
+          AC_LANG_CPLUSPLUS()
+          AC_CHECK_LIB([estbase], [main], [],
+            [AC_MSG_FAILURE([estbase test failed])],
+            []

dkasak

# Maintainer: Denis Kasak <dkasak|AT|termina.org.uk>

pkgname=ekho
pkgver=7.7.1
pkgrel=1
pkgdesc="Chinese text-to-speech (TTS) software for Cantonese, Mandarin, Zhaoan Hakka, Tibetan, Ngangien and Korean"
arch=('i686' 'x86_64')
url="http://www.eguidedog.net/ekho.php"
license=('GPL')
makedepends=('automake' 'autoconf')

dkasak

#!/usr/bin/env python

# This program is free software. It comes without any warranty, to the extent
# permitted by applicable law. You can redistribute it and/or modify it under
# the terms of the Do What The Fuck You Want To Public License, Version 2, as
# published by Sam Hocevar. See http://www.wtfpl.net/ for more details.

"""
This is a simple daemon implementing freedesktop.org's file manager interface
(http://www.freedesktop.org/wiki/Specifications/file-manager-interface/).

dkasak

Summary

The endpoint https://challenge.intigriti.io/ is vulnerable to a DOM-based XSS which allows the attacker to execute arbitrary JavaScript in the context of the page's top-level window.

Consequences

Since the attacker can execute arbitrary JavaScript in the context of the page, he would be able to steal the user's credentials, or any other secrets

dkasak

Keybase proof

I hereby claim:

• I am dkasak on github.
• I am dkasak (https://keybase.io/dkasak) on keybase.
• I have a public key whose fingerprint is BC7F 6B2F FC7E 94CA 6C60 BD42 50D3 BAAD CE0B C33E

To claim this, I am signing this object:

dkasak

" XDG Environment For VIM
" =======================
"
" References
" ----------
"
" - http://standards.freedesktop.org/basedir-spec/basedir-spec-latest.html#variables
" - http://tlvince.com/vim-respect-xdg
" - https://gist.github.com/kaleb/3885679 (the original version)
"