| import java.io.ByteArrayInputStream; | |
| import java.io.ByteArrayOutputStream; | |
| import java.io.IOException; | |
| import java.io.ObjectInputStream; | |
| import java.io.ObjectOutputStream; | |
| import java.util.HashSet; | |
| import java.util.Set; | |
| // billion-laughs-style DoS for java serialization | |
| public class SerialDOS { |
| https://github.com/playframework/playframework.com/blob/f8d7840e754ead829c7a6b6006e24b91c428faad/app/actors/DocumentationActor.scala#L135 | |
| DocumentationSummary の translations に言語別最新バージョンが格納されてる。 | |
| https://github.com/playframework/playframework.com/blob/f8d7840e754ead829c7a6b6006e24b91c428faad/app/actors/DocumentationActor.scala#L259-L261 | |
| documentation.translations.mapValues(_.defaultVersion) が translations として渡されている。 | |
| documentation は | |
| https://github.com/playframework/playframework.com/blob/f8d7840e754ead829c7a6b6006e24b91c428faad/app/actors/DocumentationActor.scala#L188 | |
| var documentation: Documentation = null | |
| documentation は UpdateDocumentation メッセージで更新される |
| あせ (・_・;) 顔文字 | |
| あせ (･∀･；) 顔文字 | |
| あせ (＾ω＾;;) 顔文字 | |
| あせ (ﾟ∀ﾟ ；) 顔文字 | |
| あせ (ﾟ∀ﾟ ；)ﾀﾗｰ 顔文字 | |
| あたふた ヽ(´･ω･｀ヽ) 顔文字 | |
| あつい (｡＞﹏＜) 顔文字 | |
| あつい (｡＞﹏＜)あㄘ”ゅい 顔文字 | |
| あつい (>﹏<｡Ξ｡>﹏<) 顔文字 | |
| あつい ι(´Д｀υ) 顔文字 |
| Set<String> keys = map.keySet(); | |
| for (String key : keys) { | |
| //some condes | |
| } | |
| //↑が↓になった | |
| Set<String> keys = map.keySet(); | |
| String[] keyarray = keys.toString().split(","); | |
| for(int i=0; i<keyarray.length; i++){ |
| The z in scalaz means this: it was early 2008 and I was working for a Java consultancy and so of course, I used the most appropriate tool for the job: scala. But it had *terrible* libraries, so I offered to fix those while also meeting my other objectives. Turns out that the Scala guys were extremely hostile to even half-decent libraries (and still are to this day). I still struggle to wrap my head around this sometimes. | |
| Anyway, so I thought, well fuck it, I will just keep them to myself for now. My (awesome) employer had already agreed that we'd probably open-source such a thing, but I was concerned most about my primary goal. So then it came time to "name" this library. I had named it "scalax" simply so that I did not have the inclination to think of a proper name. Then I found out that such a library was being developed and with my internal name! Whatever, I thought. | |
| So I looked at this scalax library, hoping that I could just abandon my efforts and jump on board with everyone else -- they too had figure |
