Radoslav Stefanov radoslav-stefanov

Frontend Security

	Security Measure	Description
☐	Use HTTPS everywhere	Prevents basic eavesdropping and man-in-the-middle attacks
☐	Input validation and sanitization	Prevents XSS attacks by validating all user inputs
☐	Don't store sensitive data in the browser	No secrets in localStorage or client-side code
☐	CSRF protection	Implement anti-CSRF tokens for forms and state-changing requests
☐	Never expose API keys in frontend	API credentials should always remain server-side

ps --no-headers -o "rss,cmd" -C php-fpm | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'
ps --no-headers -o "rss,cmd" -C apache2 | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'

Please update your awscli to 2.6.3

~~In v1.24.0, kubectl will report the following error when relying on the kubeconfig generated by aws-cli~~

~~> error: exec plugin: invalid apiVersion "client.authentication.k8s.io/v1alpha1"~~

~~The reason is that Kubernetes deprecated client.authentication.k8s.io/v1alpha1" from the exec plugin in PR108616~~

~~And the aws-cli update PR6476 has not been merged. There are two solutions~~

	# Github CLI commands to work with dependabot PRs

	# List dependabot PRs that need review
	gh pr list -l dependencies --search "status:success review:none"
	gh pr list -A app/dependabot --search "status:success review:none"

	# Instruct dependabot to merge all reviewed PRs, oldest first
	gh pr list
	-A app/dependabot \
	--search "status:success" \

	# Just a quick update for GPT and to use `rsync` instead of `cp`!
	# That means this applies to UEFI boot, though for legacy BIOD boot, feel free to swap
	# GPT to MBR below.

	# Requires https://homebrew.sh to split the install.wim file
	brew install wimlib

	# First, we need to find our device. BEFORE inserting your USB drive, run the
	# following:
	diskutil list

	# Just a quick update for GPT and to use `rsync` instead of `cp`!
	# That means this applies to UEFI boot, though for legacy BIOD boot, feel free to swap
	# GPT to MBR below.

	# Requires https://homebrew.sh to split the install.wim file
	brew install wimlib

	# First, we need to find our device. BEFORE inserting your USB drive, run the
	# following:
	diskutil list

	# If you don't remember the exact path/name, search the log for deleted files
	git log --diff-filter=D --summary \| grep delete
	# Find the file you want to get from the ouput, and use the path
	# Find the commits that involved that path
	git log --all -- some/path/to/deleted.file
	# Bring the file back to life to the current repo (sha commit of parent of commit that deleted)
	git checkout shaofthecommitthatdeletedthefile^ -- some/path/to/deleted.file

	- name: generate PSK
	shell: openssl rand -base64 48
	register: psk
	delegate_to: 127.0.0.1
	run_once: true

	- set_fact:
	psk={{ psk.stdout }}

	- debug: var=psk

	kubectl get pods --all-namespaces --sort-by='.metadata.name' -o jsonpath='{.items[].spec.containers[].resources.limits.memory}'

	kubectl get pod --all-namespaces --sort-by='.metadata.name' -o json \| jq -r '[.items[] \| {pod_name: .metadata.name, containers: .spec.containers[] \| [ {container_name: .name, memory_requested: .resources.requests.memory, cpu_requested: .resources.requests.cpu} ] }]'