隱藏在錯誤頁面error page 上顯示的tomcat版本號
# 問題 在滲透測試的 report 裡面發現了一個 Application-Platform Disclosure 的一個 issue,就是在 error page 上面顯示了 tomcat 的 version: 這個來自 apache 的默認的 error page 會顯示出 Tomcat 和版本號,這要是比黑客知道用哪個 web server / 版本,會有潛在的安全問題。 平常的 spring boot application,只要把 error whitelabel 設成 false,加上沒有設置跳轉到指定的 error page 時,就會出現由 Apache 提供的默認...
more...讀書筆記06-特別會說話的人都這樣說話2
作者:大野萌子 這本書非常適合剛到職場的小伙伴們閱讀。因為缺乏經驗,有時候說話會不小心傷到人,而導致和同事或上司的關係變到很差。這本書基本上每一章都會有至少一個說話的建議。儘管我們沒法馬上變成情商高的人,但還是可以學習 "一句話",也馬上使用那 "這一句",去做馬上能看到效果的改變。 因為最近有點忙,所以沒太多時間可以總結這本書,那我想說就可以把書的摘錄分享下來,也可以方便自己複習! # 摘錄 # 序言 ① 与他人保持适度的距离感 ② 做好自我控制这一点也与人类的 ③ 注意多使用积极的语言 ④...
more...Create a Angular Project
# Set up Angular Offical document: Angular - Setting up the local environment and workspace # Step 1 - install node and npm you can always run node -v and npm -v in your terminal to see if you have already installed node and npm. # Step 2 - install Angular CLI To install the Angular CLI, open a...
more...LC747 - Largest Number At Least Twice of Others
Largest Number At Least Twice of Others - LeetCode # Description You are given an integer array nums where the largest integer is unique. Determine whether the largest element in the array is at least twice as much as every other number in the array. If it is, return the index of the largest...
more...Lintcode 919 - Meeting RoomsII
919 · Meeting Rooms II - LintCode # Description Given an array of meeting time intervals consisting of start and end times [[s1,e1],[s2,e2],...] (si < ei) , find the minimum number of conference rooms required.) # Example Example1 Input: intervals = [(0,30),(5,10),(15,20)] Output:...
more...Lintcode 391 Number of Airplanes in the Sky
391 · Number of Airplanes in the Sky - LintCode # Description Given an list interval , which are taking off and landing time of the flight. How many airplanes are there at most at the same time in the sky? # Example Example 1: Input: [(1, 10), (2, 3), (5, 8), (4, 7)] Output: 3 Explanation: The...
more...git hands on guide
#Install git in your EC2 instance sudo yum install git -y This acticle is originally from my instructor # Overview The purpose of this guide is to provide a basic overview of the Git version control system. The goal is to get students familiar with core Git functions and version control processes....
more...Junit常用斷言Assertions
# Assertions 斷言 Assertions 是 Junit 的核心部份,用來對測試需要滿足的條件進行驗證。這些斷言方法都是 org.junit.jupiter.api.Assertions 的靜態方法。 檢查業務邏輯返回的數據是否合理 所有的測試運行結束以後,會有一個詳細的測試報告 #...
more...