I lost a day and a half of dev to figuring out that Omniauth is giving me CSRF rejections because Rails SSL middleware returns an array instead of a newline-separated string for Rack 3 but when Passenger added Rack 3 support it forgot to support the ne...
-
I lost a day and a half of dev to figuring out that Omniauth is giving me CSRF rejections because Rails SSL middleware returns an array instead of a newline-separated string when setting cookies for Rack 3 but when Passenger added Rack 3 support it forgot to support the new array-based approach and Passenger stopped supporting the ancient version of Ubuntu this app is stuck with shortly before they patched the bug and
diagnosing this was a J O U R N E Y
-
I’m not even mad, I’m just disappointed
-
@inthehands so much yak shaving
-
@darkuncle My yak is utterly bald now, going to bed
-
Worth noting that a statically typed language would have almost certainly prevented the Passenger people from making this mistake in the first place
and also a less dynamic language that isn’t amenable to the sort of live modification of libraries I used to track this down would have made it easily 5x harder to diagnose if something like it did occur.
It’s all tradeoffs.
-
@inthehands Surely you mean a [ J, O, U, R, N, E, Y ]?
-
@oscherler Well, the net result of this bug was that it would be a [“J