mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Server stats:

12K
active users

#graphql

3 posts3 participants0 posts today

GitLab naprawia podatności związane z biblioteką ruby-saml

GitLab ogłosił wydanie nowych wersji oprogramowania. Aktualizacja dotyczy zarówno Community Edition, jak i Enterprise Edition. Poprawione wersje to  17.9.2, 17.8.5 oraz 17.7.7. Najważniejsza poprawka dotyczy dwóch podatności (CVE-2025-25291, CVE-2025-25292), zgłoszonych w bibliotece ruby-saml, która jest wykorzystywana przez GitLab do SAML SSO (security assertion markup language; single sign-on). W pewnych okolicznościach...

#WBiegu #Cve #Gitlab #Graphql #Podatności #Rce #Ruby #Saml

sekurak.pl/gitlab-naprawia-pod

Sekurak · GitLab naprawia podatności związane z biblioteką ruby-samlGitLab ogłosił wydanie nowych wersji oprogramowania. Aktualizacja dotyczy zarówno Community Edition, jak i Enterprise Edition. Poprawione wersje to  17.9.2, 17.8.5 oraz 17.7.7. Najważniejsza poprawka dotyczy dwóch podatności (CVE-2025-25291, CVE-2025-25292), zgłoszonych w bibliotece ruby-saml, która jest wykorzystywana przez GitLab do SAML SSO (security assertion markup language; single sign-on). W pewnych okolicznościach...

🥘 We're cooking some great #AI stuff for @microcksio next release!

Generate meaningful samples to complete your raw spec with rich mocks! You can then export them in APIExamples format to share later with your team! And it's working with #OpenAPI, #AsyncAPI, #grpc and #GraphQL alike 🧙

youtu.be/1VtcGGu8Ib0

youtu.be- YouTubeEnjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.

I was made redundant from my first #SoftwareEngineering job at a start up a few months back. I have been doing a couple of freelance jobs here and there but I prefer the stability of something more long term.
I am looking for a #remote position within Spain.
3 years experience as a web app #FullStackDeveloper in #javascript with #React #NextJS #MongoDB #GraphQL
I have a little experience with Vue and mySQL too.
Currently learning #Typescript and looking to start a web accessibility course in the summer.
I have been described as "product minded and user focused".

Continued thread

.. I now found that such #ecommerce website is using #graphql for backend/frontend data communication.

We love GrapQL, its introspection and well documented data types, don't we?

Someone should mention them about securing the endpoints and making sure no sensitive data is leaked, as I found a (documented) "orders" type, which (unprotected) gave me access to all orders placed on that platform, including items, delivery address and the customers email addresses. Oops! 😅

#GraphQL federation: what tools are there to handle the #supergraph schema composition? Is it unwise to try to pin some custom logic inside the query planning stage? If I need to do custom authorization remapping, where would that sit?

It looks to me as if #Apollo federation gateway is a subscription-only service that requires an outside online connection... Surely that can't be right? What am I missing?

Edit: found #WunderGraph and #HiveGateway as two other options. And we're being pushed towards #Azure APIM resolver as a temporary solution. This one feels iffy.