Skip to content

Here's what's popular on GitHub today...

public-apis

Trending repository

Trending repository

The ReadME Podcast

Podcast

Your favorite open source projects and the developers who make them happen. Listen in!

GitHub API logo

Popular topic

The GitHub API allows you to build applications that integrate with GitHub.

App recommended by GitHub

LZU COVID Health Report

结合Github OAuth App编写的自动打卡工作流管理网页前端!! Github Actions全自动打卡,打卡信息存放在Actions Secrets中,个人信息隐私保护,支持打卡结果推送到社交软件和浏览器通知。

INTRODUCING New Auto COVID Health Report Workflow Management Web Front-end build by GitHub OAuth app!! Fully automatic reporting using Github Actions, store info in Actions Secrets, privacy protection for personal information, support pushing results to chat APPs and browser notification.

Trending repository

wstg

Trending repository

jespunya
jespunya commented Jun 29, 2020

What would you like to happen?
The sections 4.7.11.1 Testing for Local File Inclusion & 4.7.11.2 Testing for Remote File Inclusion address two attack vectors that are very similar one to the other. Given this situation and the few documentation on the Remote injection one, my proposal would be to merge both in a single section called Testing for File Injection.

Trending repository

shrugs
shrugs commented Apr 12, 2018

🎉 Description

The ECDSA contract has a function toEthSignedMessage(bytes32), but we should have a function that works for any length of a bytes array:

function toEthSignedMessage(bytes s) pure internal returns (bytes32) {
  return keccak256(
    "\x19Ethereum Signed Message:\n",
    uintToBytes(s.length),
    s);
}

Where uintToBytes is implemented from an ideally

App recommended by GitHub

Issue-Label Bot

Issue Label Bot automatically labels issues as either a feature request, bug or question, using machine learning. You can alias these labels so that the labels are personalized for your repo (for example if you prefer enhancement vs. feature_request).

Instructions on how to alias the labels can be viewed on the app's website.

This app only works on public repositories.