• 0 Posts
  • 151 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle






  • TL;DR:

    From today the license applied to the project will be the Apache 2.0 license with an extra line forbidding usage of the codebase as an integration or app to Atlassian’s Confluence or Jira products.

    While it’s disappointing to see the additional restriction, it’s better to have a project the devs find sustainable than to have nothing at all. It seems like the goal of this change is to protect their main source of funding.

    Worst case, people can fork the code before the change.









  • While I agree, it makes connecting to localhost as easy as http://0:8080/ (for port 8080, but omit for port 80).

    I worry that changing this will cause more CVEs like the octal IP addresses incident.

    Edit: looks like it’s only being blocked for outgoing requests from websites, which seems like it’ll have a much more reasonable impact.

    Edit 2: skimming through these PRs, at least for WebKit, I don’t see tests for shorthand IPs like 0 (and no Apple device to test with). What are the chances they missed those…?