Comments (3)
@45sound, I've referred your report to New Relic's security team. Since the issue you're describing applies to New Relic's website, not the Ruby agent code in this github repo I'm going to close the issue here. Would you be willing to open a ticket at support.newrelic.com and ask that it be escalated to our security team? We take reports of security issues very seriously and this will allow them to follow up with you as they investigate. I'm unable to open the ticket on your behalf since there is no email address associated with your github account. Thank you.
from newrelic-ruby-agent.
Emailed [email protected] now
from newrelic-ruby-agent.
Thanks!
from newrelic-ruby-agent.
Related Issues (20)
- Ruby v3.4 compatibility: address 8T BigDecimal dependency HOT 2
- Ruby v3.4 compatibility: Address the Resque instrumentation's dependency on resolv-replace HOT 1
- Ruby v3.5 compatibility: gem dependencies HOT 1
- Automate watched gems list HOT 1
- Fix unused variable warnings in unit tests HOT 1
- Internal feature request: support allowlist type configuration parameter value validation HOT 1
- Follow-ups for Rails CSP nonce, #2544 HOT 5
- Ruby agent release HOT 2
- Link to serverless documentation once it is available HOT 1
- CI: Use checkout@v4 HOT 1
- [Spike] Design APM Integration with Fleet Manager/Super Agent HOT 1
- [Spike] k8s Operator Pattern HOT 1
- Release process: start leveraging a release branch or tag to better protect `main` HOT 1
- Add GHA workflow to build and upload init containers to Docker Hub HOT 1
- Add a CI workflow that tests the init container HOT 1
- Review init container and GO script that injects the agent HOT 1
- Rails CSP nonce follow-ups HOT 1
- Spike: Caching-related instrumentation HOT 1
- Spike: Run performance tests in an environment with less variability HOT 1
- CI: upgrade to a newer retry version HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from newrelic-ruby-agent.