jacquesbh

You are the security maintainer of this Sylius project. Investigate and correct the six security advisories listed below.

This is a self-contained assignment. Do not assume a particular directory structure, hosting provider, development environment, deployment process, or set of commands. The project may use an old Sylius release, custom bundles, plugins, themes, multiple applications, or modified upstream code.

Adapt every correction to the application you actually inspect. Preserve its architecture, conventions, supported PHP version, and legitimate business behavior.

1. Verify the official advisories first

Read these URLs before you decide which corrections to apply:

jacquesbh

# To include in your ~/.bash_profile or other
# You can change the `monsieurbiz.com` and the `MONSIEUR BIZ` in the code.
#
# The generated certificates are compatible with Chrome 58 and use complete SAN section.
#
# See https://www.thesslstore.com/blog/security-changes-in-chrome-58/
# And specially https://groups.google.com/a/chromium.org/forum/#!msg/security-dev/IGT2fLJrAeo/csf_1Rh1AwAJ

function selfsignedssl () {
    echo "Country? [FR]"

jacquesbh

<?php

try {
    $installer = $this;
    $installer->startSetup();

    // Create quote table
    $tableName = $installer->getTable('iesa_quote/quote');
    if (!$installer->tableExists($tableName)) {
        $table = $conn->newTable($tableName);

jacquesbh

How to apply?

Download the patch and put it in your local environment in the root magento directory.

Run this command in your Main magento directory: patch -p0 < fulltext-search.patch.

Then remove the fulltext-search.patch file and commit the changes.

Thanks to .

jacquesbh

tests:
  "Info: Action cms/index/index":
    assertions:
      - "metrics.magento1.action.cms_index_index.count"
  "Info: Action cms/page/view":
    assertions:
      - "metrics.magento1.action.cms_page_view.count"
  "Info: Action catalog/category/view":
    assertions:
      - "metrics.magento1.action.catalog_category_view.count"

jacquesbh

→ Great great documentation about all this (so much better): https://github.com/drduh/YubiKey-Guide

Using Yubikey (PIV on osx, etc.)

Documentation for PIV: https://github.com/Yubico/yubikey-piv-manager/tree/master/doc

To manage the certificates: https://www.yubico.com/support/knowledge-base/categories/articles/unpair-yubikey-piv-login-macos-sierra/

Using GPG key

jacquesbh

#!/bin/bash

# Usage: ./git_clean_branches.sh REPOSITORY_PATH

# Go to the directory
cd "$1"

# Delete branches, but keep develop, master and the current branch
git remote prune origin
git branch --merged | grep -v "\*" | grep -v "master" | grep -v "develop" | xargs -n 1 git branch -d

jacquesbh

Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000716099 in zend_std_read_property (object=0x7f51ebc73170, member=0x7f51d91be440, type=0, key=0x7f51d91be440) at /build/php5-5.6.19+dfsg/Zend/zend_object_handlers.c:455
455     /build/php5-5.6.19+dfsg/Zend/zend_object_handlers.c: No such file or directory.

jacquesbh

Keybase proof

I hereby claim:

• I am jacquesbh on github.
• I am jacquesbh (https://keybase.io/jacquesbh) on keybase.
• I have a public key whose fingerprint is DEB8 A04A 7CB9 5FD7 57E8 B1A0 5B80 3023 D40A 0F67

To claim this, I am signing this object:

jacquesbh

<?php
if (SOMETHING_TRUE) {
    return true;
} else {
    return false;
}