Node on 村边的池塘

Axios Error Request Body Larger Than MaxBodyLength Limit

Tue, 28 Mar 2023 18:52:12 +0800

Axios error

Request Body Larger Than MaxBodyLength Limit

solution

config axios maxContentLength/maxBodyLength to a large number or Infinity

    const options = {
      url,
      //method: 'post',
      //...
      maxContentLength: Infinity,
      maxBodyLength: Infinity,
    };

Blind Sql Injection

Wed, 16 Nov 2022 09:29:06 +0800

Security

Risk: It is possible to view, modify or delete database entries and tables
Cause: Sanitation of hazardous characters was not performed correctly on user input
Fix: Review possible solutions for hazardous character injection
Reasoning: The test result seems to indicate a vulnerability because it shows that values can be appended to parameter values, indicating that they were embedded in an SQL query. In this test, three (or sometimes four) requests are sent. The last is logically equal to the original, and the next-to-last is different. Any others are for control purposes. A comparison of the last two responses with the first (the last is similar to it, and the next-to-last is different) indicates that the application is vulnerable.

How to fix

https://sequelize.org/v5/manual/raw-queries.html

make sure to ‘replace’/‘bind’

React for Beginners

Fri, 25 Sep 2020 07:56:47 +0800

Prerequesite

node
javascript
html
css
es6
code editor

create-react-app

npm install -g create-react-app

create-react-app app-name

React component

state

class component里面管理状态使用state

class Counter extends Component {
  state = {
    counter: 10,
    title: "this is demo",
    products: [
      {
        id: 1,
        name: "ok",
      },
      {
        id: 2,
        name: "bad",
      },
    ],
  };
  // ..... other
}

render

jsx

expression

attributes

list/array

conditional rendering

handle events

binding event handlers

updating state

event arguments

passing data to component

passing children

debug react app

props vs state

raising and handle events

multiple component in sync

lifting state up

functional component

destructure arguments

lifecycle hooks

Sequelize Bulk Create to return with primary key in Postgre

Tue, 19 May 2020 20:00:37 +0800

Sequelize data model

在使用 bulkCreate的时候，如果想在返回的数据中包括生成的id, 需要加上option, { returning: true }

    return CertificationEndUsers.bulkCreate(usersToInsert, { returning: true });

另外 postgresql中table name包含双引号和不包含的，竟然是不一样的两个table

"users"
users

比如这是两个table

Angular Javascript Heap Out of Memory

Thu, 14 May 2020 21:20:50 +0800

如果启动angular的时候有报 Javascript heap out of memory错误，可以试着修改

node_modules/.bin/ng

加上 --max_old_space_size

#!/usr/bin/env node --max_old_space_size=4096
'use strict';

Python Nest

Sat, 11 Apr 2020 21:15:14 +0800

背景

最近有做一个nestjs的项目，用的nestjs实现的微服务，如果所有的功能都用node/nestjs写，那倒也没有什么问题了。可是有一个功能是需要用到机器学习，代码是用python写的，需要用python实现一个微服务，供nest app来调用，同时，python代码也需要调用nest 微服务来取得一些数据。这就比较尴尬了，在网上由于没有找到对应的python库，所以自己实现了一个。