strange url query showing up in errors - url

I have a page that's been throwing the occasional error due to a strange query appending itself to the url. My errors show this i being added:
&ved=1t:1527...
The ... means there's more. A little googling turned up some urls in existence with this:
&ved=1t:1527,r:9,s:107
The syntax is alien to me. I'm fairly certain it's not coming from my code and I'd like to know what it's trying to do. Does anyone have a clue what this might be?

Related

Questions about Unicorn::ClientShutdown

Can anyone help me better understand Unicorn::ClientShutdown errors? I see them occasionally via my web app's error logs and I have no idea what's causing them, how I can replicate the issue, or whether it's safe to ignore it altogether.
From the documentation (https://www.rubydoc.info/gems/unicorn/2.0.0/Unicorn/ClientShutdown), it seems like this has something to do with interrupted sockets, but I'm not sure exactly what that means or how it relates to my app.
I believe I've only ever seen this on POST requests, and the error has almost exclusively been associated with a simple POST request that tracks page views (and is by far the most common non-GET request made by the web app).
Thanks in advance for your help!

Parts of https://jenkins.io is down. How do I report it?

So https://www.jenkins.io/ has been down for at least most of the afternoon. The main page is accessible, but blog posts and plugins etc. aren't available. I get a 503 that looks like this:
I figured I'd try again later, but since it was still down I thought I'd better report it. So I went to their JIRA to report the issue at https://issues.jenkins-ci.org/, which seems to be up, but when trying to log in I get a 502 response, with the following error message:
I went to their GitHub, but they have issues disabled there. I'm running out of options, so I figured I'd ask here to see if there is someone that knows how to get in touch with someone that knows how to fix it. I found a few tweets about it, but no responses from anyone that seems to be able to do anything about it.
After the issue was resolved and I was able to log in to JIRA, I found a way to report the issue and apparently a few people already did. If this happens again, you can go to https://github.com/jenkins-infra/jenkins.io/issues/ and report the issue there.
Another place to check is the jenkins-infra channel on freenode, as that's where they are discussing the issue during investigation.
In case you were curious, it seems like this outage was due to a problem with the Kubernetes cluster where it was hosted. I don't know any more details than that.
I hope this might help someone in the future.

ActionController::RoutingError (No route matches “/javascripts/defaults.js

Everything seems to be working fine, the profile get created and the
company address gets saved but I would like to make it so that this
error is not thrown. I imagine that this is a routing issue, but I
honestly am not certain of that. Anyone have any ideas about what is
happening and how to stop it from throwing these errors? Thanks,
There is not much detail in your question but maybe this previous post can help you.

What is the `Rmch-Securitycookie` HTTP header?

I'm seeing some weird POST errors to my Rails 5 site. They are in the form of POST https://www.example.com/pages/:5054, with the weird :5054 at the end. I also do not have any route that POSTs to /pages/ or /pages/:id. I've got no idea what is causing these weird POSTs. The referrer-URLs are from my site, so it is not, as far as I can see, some weird bot or some such.
The only common denominator I see is the presence of the Rmch-Securitycookie: header on the bad requests. While I do not know if this is the root cause of my issue, it's a start at least. I'm thinking it's a bad extension or some monitoring software or some such. Google turns up nothing; has anyone encountered this header and knows what it is?

Ruby on Rails Mysterious Javascript Alert box with cookie information

I have a problem in a Ruby on Rails app that I am working on. I have been working on the app for months and I have never had this problem before and after a bit of Google searches I think that somehow someone is trying to steal cookies with javascript.
When I click on the link I get an alert box titled "the page at www.napkinboard.com says:" and contains the following message:
__utmz=217223433.1270652009.59.3.utmcsr=localhost:3000|utmccn=(referral)|utmcmd=referral|utmcct=/; __utma=217223433.2133018314.1265749085.1271097412.1271125626.63; __utmc=217223433; __utmb=217223433.11.10.1271125626
I checked the database and all data associated with this 'food_item' looks completely normal and does not contain any javascript at all.
How did this suddenly happen and how can I stop it? I appreciate any help. Thanks.
EDIT: Can't believe I forgot the URL: http://www.napkinboard.com/food_items/413
It sounds like you've found a link that exploits an XSS vulnerability using the query string.
Make sure to properly escape all of your output.
load up firefox and firebug, and see what the javascript and network stack trace show. That should give you an idea of where it's coming from, etc.

Resources