csirt_it: #Apache: rilevate nuove vulnerabilità, di cui 2 con gravità “critica”, nel prodotto #HttpServer
Rischio: 🟠
Tipologia:
🔸 Arbitrary Code Execution
🔗 acn.gov.it/portale/w/rilevat…
🔄 Aggiornamenti disponibili 🔄
#Apache: rilevate nuove vulnerabilità, di cui 2 con gravità “critica”, nel prodotto #HttpServer
Rischio: 🟠
Tipologia:
🔸 Arbitrary Code Execution
🔗 acn.gov.it/portale/w/rilevat…
🔄 Aggiornamenti disponibili 🔄
I'm very careful about dependencies I'm using in my OSS projects. Today, someone came to lunet to replace ASP .NET HttpServer with an obscure closed source http server github.com/lunet-io/lunet/pu… I had a quick look inside and don't see anything suspicious, but it could become a trojan horse. So weird. Instant no go! 🚨
Voilà: tinyurl.com/2tdeaypa
et comme absolument tout est cohérent (HttpApi Schema HttpServer), tu as juste à provide un layer et beep boop ça marche directement, pas besoin de relier des fils entre 15 libraries comme tous les autres frameworks
clone the effect repo, ask it to find example of the httpserver inside their source.
My llm oneshotted this last week by saying "there's actually pretty good example of httpserver inside the effect repo".
I now have 3 times less code for the double of feature and robustness.
Nope not rewriting
github.com/kartikey321/dart-…
I am just developing a proof of concept for shifting httpserver parsing from dart to zig.
these are tried out benchmarks for it github.com/MDA2AV/HttpArena/…
currently it only supports http1.1 support.
It's that time of year again...
Blazium Release: 0.5.246 which is based on our 4.3.x Branch has been released, you can grab it from blazium.app/download/prebuil…, Video, and more posted tomorrow. Today has been 1 of those days. added enetserver, socketio, twitchapi, kickapi, obsclient, irc and httpserver natively also added rcon support and crowdcontrol support. Posts to come to explain everything!!!!
I have been playing around a lot lately with creating alternative an alternative httpserver that satisfies the same APIs but no dart:io.
I suppose the same approach would work for a socket only approach, think you'd be limited by the socket APIs though
pub.dev/packages/server_nati…
The bringer of the light through sound.
sound>light
Lucifer Lightbringer
Lucifer is a fast, lightweight web framework in dart.
Built on top of native dart HttpServer to provide an elegant way to fulfill the needs of many modern web server these days.
Lucifer is open, efficient, and provide lots of features to handle dozen kinds of things.
github.com/salkuadrat/lucife…
Asclepius AI
Welcome to Personalized Medicine Asclepius.ai
The Future of Healthcare
Pioneering a New Era in Medicine with Advanced AI Technology
asclepius.ai/
Built my first Actix-Web server and finally understood how to share one database / HTTP client across all worker threads safely.
1. Create a single AppState with the shared resource (like sqlx::Pool or reqwest::Client).
2. Wrap it in web::Data::new(AppState { ... }) so it becomes a cheap, thread-safe shared handle.
3.Move that shared state into HttpServer::new(move || ...) and call .app_data(state.clone()) so each worker gets a clone of the same Arc-backed state, not a new pool.
4. In handlers, take data: web::Data<AppState> and use data.pool / data.client instead of creating a new connection or client per request.
#Rust#ActixWeb#RustLang#WebDevelopment#Backend@Lg__Crusty@Actix
HttpServer::new creates an App per worker thread, not one global app
So state created inside that closure is thread-local and can desync
For truly shared state, create web::Data outside the closure, clone it in, and use Mutex if you need mutation