IRC channel logs

2017-09-24.log

back to list of logs

<Apteryx>Hello! When --auto-compile is active (the default), is the file compiled before being run? or is it interpreted and run, and then compiled in the background?
<daviid>Apteryx: the former
<apteryx[m]>OK. Thanks.
<daviid>apteryx[m]: you can introduce a tiny bug in some of your to convince yourself ... if you wish ...
<apteryx[m]>Eh, I put a timer in my code and could see that it is a you described. Auto compilation leads to much slower execution on the first run.
<daviid>apteryx[m]: obviously - it has to compile (and optimize) ...
<amz3`>héllo all!
<amz3`>I discovered a security issue in my web app boilerplate
<amz3`>basically, the static route can lead to display any file in the host like /etc/shadow
<amz3`>via a url that is /static/../../../../etc/shadow
<amz3`>you can not reproduce the issue with browser because they strip extra ".."
<amz3`>the boilerplate code is based on guix-web \\cc davexunit
<amz3`>how did you solve this issue?
<amz3`>I can simply forbid .. in the path component
<amz3`>here is fix https://github.com/a-guile-mind/guile-web/commit/b43cabef9a337bc07d13fcd3d25c77a48eec6757
<manumanumanu>Is there any documentation how the guile reader works? I would like to modify it without the guile-reader extension (which won't compile on my broken system)
<manumanumanu>oh. found the source. Neat. I can work this
<manumanumanu>So: the reader is a fluid. Is there any way I can set it to affect anything outside the current file? Doing a fluid-set! seems to give only very local results
<stis>hello guilers!
<mwette>hi
<sneek>mwette, you have 2 messages.
<sneek>mwette, ArneBab_ says: 0.9.4 now uses /site/
<sneek>mwette, ArneBab_ says: editing for non-programmers is something I see as a goal for wisp. However I don’t think that the syntax is actually much easier to edit. What it provides is that it looks less daunting, so people dare to assume that they can understand what it does — and therefore dare to edit.
<lukas__>Hey, does anybody know where I can see the code of Nash written by Atsuro Hoshino?
<lukas__>I emailed him some time ago without response so just wanted to know what is status quo of JIT for guile
<mwette>ArneBab: wisp could be used to write specs, like guix package specs, in excel even. However, what is needed is a language spec/intro that does not require one to have familiarity w/ lisp
<manumanumanu>stis: Skepp ohoj!
<ArneBab>mwette: I hope that I’ll manage to write that the next months
<mwette>ArneBab: Awesome! Maybe look at RnRS or other tutorial like "learn Scheme in fixnum days"
<ArneBab>mwette: do you know casting spels with lisp? ☺
<mwette>ArneBab: Have not heard of it. I will look.
<ArneBab>(though that’s somewhat building upon parens)
<ArneBab> http://www.lisperati.com/casting-spels-emacs/html/casting-spels-emacs-1.html
<mwette>thx
<mwette>z