shpigford / gemfile.directory Goto Github PK

Hi!

I'd like to add a feature where you can see a list of the Gemfiles you've starred. Can I start working on this?

If someone sets the site URL to a javascript payload, it can lead to an XSS: https://gemfile.directory/gemfiles/7c560616-ac8f-4cb7-8428-22b4ab7a29e4

Search by gemfile name as well as gemfiles.

Primarily just needs to do an ILIKE match on the gemfile name and content columns (%query%).

hey @Shpigford 👋🏼 very interesting initiative!

I'm trying to update a Gemfile I submitted some weeks ago (🏆 Open Source Hereos https://gemfile.directory/gemfiles/2803a936-8b2e-48fe-9d94-305482e0291c), but when I click the "Update Gemfile" button I got the following error:

(no other attributes were changed, only copy-pasted new Gemfile)

Currently has zero tests. Would be helpful if it was not zero.

End goal is showing the most popular gems.

Likely need to have a common table with every gem that's ever been found in submitted gemfiles so we can use that in associations.

Should we track gem versions?