sure sure, but that would require them to have d/led the templates and all that sort of stuff, and know how to host the files via sinatra. Not a terrible problem, but not really... automatic. It'd be nice if we did include sensible defaults in the gems and keep cutting edge ones up on the site or something if people want to use them.
how about that? -T On Sun, Sep 5, 2010 at 2:42 PM, Martin Gamsjaeger <[email protected]>wrote: > Hey guys, > > One way to achieve local dm-rails app installs is to provide a simple > rack endpoint that serves the template files and serve that via rackup > or rails itself. Users can then point the rails new project -m command > to that URL and have their application template served locally. > Basically, that's what I've done in my old rails-templates repo [1]. > I've used sinatra over there, but rack alone would probably be enough, > rails itself would be just as easy tho. > > cheers > snusnu > > On Sep 5, 12:21 pm, Jonathan Stott <[email protected]> wrote: > > On 5 September 2010 08:24, Ted Han <[email protected]> wrote: > > > > > Hey gang (this is primarily a way to get a message to snusnu), > > > I am poking around w/ dm-rails and one thing that immediately jumped > out at > > > me was the invocation that > http://github.com/datamapper/dm-railsrecommends > > > is just ripe for a man in the middle attack. Additionally invocation > that > > > requires hitting the web means that you can't start new projects when > you > > > don't have a net connection. > > > wycats suggested that there should be a railties generator that we > > > distribute with the dm-rails gem (like the ones used in beard for > instance > > >http://github.com/carlhuda/beard/tree/master/lib/generators/). And > while > > > that doesn't fix the MitM attack vector (which did spawn an interesting > > > conversation on twitter regarding rubygems' security model), it will > reduce > > > the opportunity for attack and also make it runnable locally. > > > So if ppl think that's the way to go (i do), or have objections, please > say > > > so! > > > -Ted > > > > I agree, having it as a gem, while it's potentially slower moving for > > updates, seems like a more sensible idea, both from a security PoV and > > also the convenience of being able to do things offline. > > > > Regards > > Jon > > -- > You received this message because you are subscribed to the Google Groups > "DataMapper" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<datamapper%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/datamapper?hl=en. > > -- You received this message because you are subscribed to the Google Groups "DataMapper" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/datamapper?hl=en.
