Posts
Arachni Security Scanner Source Code Analysis (Part 1)
· β˜• 7 min read
Arachni is a web security vulnerability scanner built on the Ruby on Rails framework. 1. Ruby on Rails Ruby on Rails, abbreviated ROR, is a web framework that consists of two parts: the Ruby language and the Rails framework. Ruby had always been popular in Japan, until 2004, when a 26-year-old Dane, David Heinemeier Hansson, proposed the web framework Rails.

Apidoc: Practice and Automated Generation
· β˜• 3 min read
In a frontend/backend separated architecture, API documentation changes hands frequently. When third-party interfaces are involved, API and documentation changes can be even faster in multi-party collaboration scenarios. To make maintaining the API and handing over documentation easier, here is a documentation generation tool worth recommending β€” apidoc. 1. Introduction to

Django Restful APIs with Tastypie
· β˜• 3 min read
1. Restful REST is short for Representational State Transfer, meaning “representation state transfer”. Restful is a development philosophy and a software architecture style for the World Wide Web. 1.1 Features of Restful Abstract resources Images, text, songs, and videos are all resource entities; on the network they are abstracted as

Same-Origin Policy and Cross-Origin Access
· β˜• 2 min read
1. Same-Origin Policy The same-origin policy is the cornerstone of browser security. The definition of same-origin covers three aspects: Same protocol Same domain Same port Scope of the restrictions: Cookie, LocalStorage, and IndexDB cannot be read The DOM cannot be obtained AJAX requests cannot be sent Simply put, two URLs whose protocol, domain, and port differ in any way are not allowed to communicate with each other, and the scope covers reading each other’s cookies and DOM and sending AJAX requests.

Linux Performance Command Tools
· β˜• 1 min read
There are many performance tools on the Linux platform, enough to make your head spin, but long-term exploration and experience have shown that the most useful ones are still those time-tested, simple little utilities. Below are the command-line tools collected from system performance expert Brendan D. Gregg’s talk on Linux performance (Linux Performance Tools).