thesamesam

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Background

On March 29th, 2024, a backdoor was discovered in xz-utils, a suite of software that

danjac

{#
class ReviewForm(forms.ModelForm):
    
    class Meta:
        model = Review
        fields = (
            "comment",
            "score",
        )
        help_texts: ClassVar = {

cnk

class CourseIndexPage(Page):
    # ..... fields ......
    base_form_class=CourseIndexPageForm
    
    
class CourseIndexPageForm(WagtailAdminPageForm):

    def __init__(self, *args, **kwargs):
        """
        Sets up the Course selector to treat selecting null for the Edition as setting it to "current".

danjac

from django.http import HttpRequest, HttpResponse
from django.template.response import TemplateResponse
from render_block import render_block_to_string


def render_template_fragments(
    request: HttpRequest,
    template_name: str,
    context: dict | None = None,
    *,

marcus-at-localhost

//@see https://codepen.io/localhorst/pen/dyqbboY
(function () {
	'use strict'
	if(location.hash){
		const triggerEl = document.querySelector(location.hash)
		bootstrap.Tab.getOrCreateInstance(triggerEl).show() // Select tab by name
	}

	const selectableTabList = [].slice.call(document.querySelectorAll('[data-bs-toggle="tab"]'))
	selectableTabList.forEach((selectableTab) => {

TobeTek

from django.db import models
from django.utils.translation import gettext_lazy as _


class Person(models.Model):
    """
    Store data about people in a school
    """

    name = models.CharField(max_length=100)

RobertAKARobin

Safari's date-picker is the cause of 1/3 of our customer support issues

...and obviously we're building a workaround. But I'm absolutely flabbergasted that a standard <input type="date"> HTML field, in a standard browser, from a company that bases its reputation good design, could be so dreadful.

The context

I'm the developer for a startup that sells a genetic test to recommend medications for high blood pressure. For medical reasons we need to know our customers' birth date. Most of our customers are in their 60s or older. We've found that many of them use iPads or iPhones. And they're the ones who complain to our customer support that our site is unusable.

The problem

mattdesl

1. Download your Twitter archive

You can find this feature in Settings > Download Twitter Archive. It might take 24 hours to receive. Unzip the file and open the data folder in your terminal:

cd ~/Downloads/twitter-archive-zip-you-downloaded/data

(I have seen reports that this function may no longer be working, so this guide is mostly useful to those who were lucky enough to already have downloaded their archive.)

marcus-at-localhost

<form hx-post="/example" hx-ext="disable-submit">
  <button type="submit" class="hx-disable button-default">Save</button>
</form>

htmx.defineExtension('disable-submit', {
  onEvent: function (name, evt, data) {
 let elt = evt.detail.elt;

davemerwin

class AddImage(LoginRequiredMixin, CreateView):
    """
    adds a image
    """

    form_class = ImageForm
    model = Image

    def get_template_names(self):
        if self.request.htmx: