There is another Cross-Site Scripting (XSS) Weakness in the Rails method strip_tag(). The problem was found in the HTML::Tokenizer which has bugs when parsing non-printable ASCII characters.

For some reason I find myself starting new projects on holidays. Perhaps it’s mental decompression, or just an excuse to have some fun. Either way, today’s holiday project was a little smaller than usual—I’m already done!

It’s a tiny Sinatra app for allowing people to anonymously submit tickets to your Unfuddle account. You could use this for letting clients submit work requests, beta testers to submit bugs, or whatever.

This morning while dealing with a support issue, I asked this question on the twitters:

Do you create a single (background) job for an event (AfterPostUpdated), or multiple jobs for tasks (SendPostEmails, UpdatePostCounts)?

In Tender Support, updating a discussion spawned a job that looked something like this:

Last night it was my great pleasure to host the Lightning Talks session at RubyConf 2009. We had an amazing series of 20 talks that took just over 2 hours. The tech gremlins seemed to be off drinking somewhere and none of the presentations failed.

Here's a list of all the speakers and links to their stuff.