Friday, January 5, 2018

csv injection


If the csv file cell value uses formulas, it is often to see csv injection. For instance, if the cell value is  =cmd|' calc'!A0 which will launch calculator.

To prevent csv injection attack, you need either filtering or neutralizing the spreadsheet meta-characters used to define formulas. These 4 characters are +, -, =, and @

Filter is to remove the meta-characters if see excel cell value beginning with one of these 4 characters.

Neutralize is to precede cell values that begin with the characters: +, -, =, or @ with a single quote. This is called “escaping” or “neutralizing” the characters to have excel cell value interpreted as data instead of formulas.

Wednesday, January 3, 2018

An unknown Subversion error occurred. (code = 155037)


Suddenly my Mac Versions app starts to report "An unknown Subversion error occurred. (code = 155037)" when access SVN repository. This error is very generic and useless to help me troubleshoot the root cause.

Google took me to this blog
http://michaelwelburn.com/2013/08/08/error-code-155037-problem-switching-from-svn-1-6-17-to-1-7-8-on-os-x/

But I didn't update svn version or change Versions' settings, so I am thinking of other ways. Finally I figured out svn cleanup then svn update will help resolve this error.

Wednesday, December 13, 2017

GitLab Commands


After create a new repository on gitlab, it usually gives below command line instructions.

Git global setup
git config --global user.name "Jim Zhao"
git config --global user.email "jim@example.com"

Create a new repository
git clone https://gitlab.com/jimzhao/test.git
cd test
touch README.md
git add README.md
git commit -m "add file"
git push -u origin master

Existing folder
cd existing_folder
git init
git remote add origin https://gitlab.com/jimzhao/test.git
git commit -m "init message"
git push -u origin master

Existing Git repository
cd existing_repo
git remote rename origin old-origin
git remote add origin https://gitlab.com/jimzhao/test.git
git push -u origin --all
git push -u origin --tags