Skip to content

Fix README #494

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Jul 25, 2017
Merged

Fix README #494

merged 2 commits into from
Jul 25, 2017

Conversation

yhirano55
Copy link
Contributor

I've added option require: false on Usage. Because this gem doesn't need autorequiring. And I've refactored tiny things. Thanks.

@ctran ctran merged commit 9f3a217 into ctran:develop Jul 25, 2017
@ctran ctran added this to the v2.7.3 milestone Jul 25, 2017
@yhirano55 yhirano55 deleted the fix_readme branch July 25, 2017 21:55

Into Gemfile from Github:

gem 'annotate', git: 'https://github.com/ctran/annotate_models.git'
gem 'annotate', github: 'ctran/annotate_models', require: false
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will cause an non-secure warning, right?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This block is which was declared on the top of Gemfile:

git_source(:github) {|repo_name| "https://github.com/#{repo_name}.git" }

Its a workaround for a bug in Bundler which can cause sources from github to loaded via HTTP and not HTTPS - which makes it vulnerable to man in the middle attacks. We'll usually not remove it.

Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for pointing this out to me. The short form doesn't seem to gain us much and has a security downside. I would rather use the longer form in this case.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, I see. I'll fix it, soon.

Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@yhirano55 don't worry about it, I already started #496.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants