karths/binary_classification_train_comp
012
1Unnamed: 0,id,type,created_at,repo,repo_url,action,title,labels,body,index,text_combine,label,text,binary_label2241762,18474153624.0,IssuesEvent,2021-10-18 04:07:16,numpy/numpy,https://api.github.com/repos/numpy/numpy,closed,DOC: Clarify that numpy average is the mean?,04 - Documentation,"Looking at the documentation for numpy average:
3https://github.com/numpy/numpy/blob/b235f9e701e14ed6f6f6dcba885f7986a833743f/numpy/lib/function_base.py#L280-L419
4
5I think this is the weighted arithmetic mean, as described at:
6https://en.wikipedia.org/wiki/Weighted_arithmetic_mean
7Not to be confused with the weighted median:
8https://en.wikipedia.org/wiki/Weighted_median
9
10I suggest clarifying the documentation to clearly say that the weighted mean is being calculated. It would also be nice if the weighted median was included as well.",1.0,"DOC: Clarify that numpy average is the mean? - Looking at the documentation for numpy average:
11https://github.com/numpy/numpy/blob/b235f9e701e14ed6f6f6dcba885f7986a833743f/numpy/lib/function_base.py#L280-L419
12
13I think this is the weighted arithmetic mean, as described at:
14https://en.wikipedia.org/wiki/Weighted_arithmetic_mean
15Not to be confused with the weighted median:
16https://en.wikipedia.org/wiki/Weighted_median
17
18I suggest clarifying the documentation to clearly say that the weighted mean is being calculated. It would also be nice if the weighted median was included as well.",0,doc clarify that numpy average is the mean looking at the documentation for numpy average i think this is the weighted arithmetic mean as described at not to be confused with the weighted median i suggest clarifying the documentation to clearly say that the weighted mean is being calculated it would also be nice if the weighted median was included as well ,0193299,6261267432.0,IssuesEvent,2017-07-14 23:23:17,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,opened,overflow compability,compatibility rc3.1,"Please answer these questions before submitting your issue. Thanks!
20
211. What did you do?
22
23`select -9223372036854775809;`
24
25
262. What did you expect to see?
27
28`9223372036854775809` is overflow math.MaxInt64, but mysql convert it to Decimal type.
29
30```
31mysql> select -9223372036854775809;
32Field 1: `-9223372036854775809`
33Catalog: `def`
34Database: ``
35Table: ``
36Org_table: ``
37Type: NEWDECIMAL
38Collation: binary (63)
39Length: 20
40Max_length: 20
41Decimals: 0
42Flags: NOT_NULL BINARY NUM
43
44
45+----------------------+
46| -9223372036854775809 |
47+----------------------+
48| -9223372036854775809 |
49+----------------------+
501 row in set (0.00 sec)
51```
52
533. What did you see instead?
54
55but TiDB return 9223372036854775807 caused by int overflow
56
57```
58mysql> select -9223372036854775809;
59Field 1: `-9223372036854775809`
60Catalog: `def`
61Database: ``
62Table: ``
63Org_table: ``
64Type: LONGLONG
65Collation: binary (63)
66Length: 0
67Max_length: 19
68Decimals: 31
69Flags: BINARY NUM
70
71
72+----------------------+
73| -9223372036854775809 |
74+----------------------+
75| 9223372036854775807 |
76+----------------------+
771 row in set (0.00 sec)
78```
79
804. What version of TiDB are you using (`tidb-server -V`)?
81
82",True,"overflow compability - Please answer these questions before submitting your issue. Thanks!
83
841. What did you do?
85
86`select -9223372036854775809;`
87
88
892. What did you expect to see?
90
91`9223372036854775809` is overflow math.MaxInt64, but mysql convert it to Decimal type.
92
93```
94mysql> select -9223372036854775809;
95Field 1: `-9223372036854775809`
96Catalog: `def`
97Database: ``
98Table: ``
99Org_table: ``
100Type: NEWDECIMAL
101Collation: binary (63)
102Length: 20
103Max_length: 20
104Decimals: 0
105Flags: NOT_NULL BINARY NUM
106
107
108+----------------------+
109| -9223372036854775809 |
110+----------------------+
111| -9223372036854775809 |
112+----------------------+
1131 row in set (0.00 sec)
114```
115
1163. What did you see instead?
117
118but TiDB return 9223372036854775807 caused by int overflow
119
120```
121mysql> select -9223372036854775809;
122Field 1: `-9223372036854775809`
123Catalog: `def`
124Database: ``
125Table: ``
126Org_table: ``
127Type: LONGLONG
128Collation: binary (63)
129Length: 0
130Max_length: 19
131Decimals: 31
132Flags: BINARY NUM
133
134
135+----------------------+
136| -9223372036854775809 |
137+----------------------+
138| 9223372036854775807 |
139+----------------------+
1401 row in set (0.00 sec)
141```
142
1434. What version of TiDB are you using (`tidb-server -V`)?
144
145",1,overflow compability please answer these questions before submitting your issue thanks what did you do select what did you expect to see is overflow math but mysql convert it to decimal type mysql select field catalog def database table org table type newdecimal collation binary length max length decimals flags not null binary num row in set sec what did you see instead but tidb return caused by int overflow mysql select field catalog def database table org table type longlong collation binary length max length decimals flags binary num row in set sec what version of tidb are you using tidb server v ,1146207937,15860455507.0,IssuesEvent,2021-04-08 09:10:57,cockroachdb/cockroach,https://api.github.com/repos/cockroachdb/cockroach,opened,roachtest: restore2TB/nodes=10 failed,C-test-failure O-roachtest O-robot branch-release-21.1 release-blocker,"[(roachtest).restore2TB/nodes=10 failed](https://teamcity.cockroachdb.com/viewLog.html?buildId=2859883&tab=buildLog) on [release-21.1@389cbd4be0e9ce22ca7789cd61802f1f90392c97](https://github.com/cockroachdb/cockroach/commits/389cbd4be0e9ce22ca7789cd61802f1f90392c97):147 148```149 cluster.go:2254,restore.go:257,cluster.go:2666,errgroup.go:57: output in run_080247.373_n1_cockroach_sql: /home/agent/work/.go/src/github.com/cockroachdb/cockroach/bin/roachprod run teamcity-2859883-1617861597-21-n10cpu4:1 -- ./cockroach sql --insecure -e "": context canceled150 (1) attached stack trace151 -- stack trace:152 | main.(*cluster).RunE153 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2332154 | main.(*cluster).Run155 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2252156 | main.registerRestore.func1.1157 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/restore.go:257158 | main.(*monitor).Go.func1159 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2666160 | golang.org/x/sync/errgroup.(*Group).Go.func1161 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/vendor/golang.org/x/sync/errgroup/errgroup.go:57162 | runtime.goexit163 | /usr/local/go/src/runtime/asm_amd64.s:1374164 Wraps: (2) output in run_080247.373_n1_cockroach_sql165 Wraps: (3) /home/agent/work/.go/src/github.com/cockroachdb/cockroach/bin/roachprod run teamcity-2859883-1617861597-21-n10cpu4:1 -- ./cockroach sql --insecure -e ""166 | RESTORE csv.bank FROM167 | 'gs://cockroach-fixtures/workload/bank/version=1.0.0,payload-bytes=10240,ranges=0,rows=65104166,seed=1/bank'168 | WITH into_db = 'restore2tb'"" returned169 | stderr:170 |171 | stdout:172 Wraps: (4) secondary error attachment173 | signal: killed174 | (1) signal: killed175 | Error types: (1) *exec.ExitError176 Wraps: (5) context canceled177 Error types: (1) *withstack.withStack (2) *errutil.withPrefix (3) *main.withCommandDetails (4) *secondary.withSecondaryError (5) *errors.errorString178 179 cluster.go:2688,restore.go:264,test_runner.go:767: monitor failure: monitor task failed: context canceled180 (1) attached stack trace181 -- stack trace:182 | main.(*monitor).WaitE183 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2676184 | main.(*monitor).Wait185 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2684186 | main.registerRestore.func1187 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/restore.go:264188 | [...repeated from below...]189 Wraps: (2) monitor failure190 Wraps: (3) attached stack trace191 -- stack trace:192 | main.(*monitor).wait.func2193 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2732194 | runtime.goexit195 | /usr/local/go/src/runtime/asm_amd64.s:1374196 Wraps: (4) monitor task failed197 Wraps: (5) context canceled198 Error types: (1) *withstack.withStack (2) *errutil.withPrefix (3) *withstack.withStack (4) *errutil.withPrefix (5) *errors.errorString199 200```201 202<details><summary>More</summary><p>203 204 205Artifacts: [/restore2TB/nodes=10](https://teamcity.cockroachdb.com/viewLog.html?buildId=2859883&tab=artifacts#/restore2TB/nodes=10)206Related:207- #61396 roachtest: restore2TB/nodes=10 failed [stuck in kv] [C-test-failure](https://api.github.com/repos/cockroachdb/cockroach/labels/C-test-failure) [GA-blocker](https://api.github.com/repos/cockroachdb/cockroach/labels/GA-blocker) [O-roachtest](https://api.github.com/repos/cockroachdb/cockroach/labels/O-roachtest) [O-robot](https://api.github.com/repos/cockroachdb/cockroach/labels/O-robot) [branch-master](https://api.github.com/repos/cockroachdb/cockroach/labels/branch-master)208 209[See this test on roachdash](https://roachdash.crdb.dev/?filter=status%3Aopen+t%3A.%2Arestore2TB%2Fnodes%3D10.%2A&sort=title&restgroup=false&display=lastcommented+project)210<sub>powered by [pkg/cmd/internal/issues](https://github.com/cockroachdb/cockroach/tree/master/pkg/cmd/internal/issues)</sub></p></details>211",2.0,"roachtest: restore2TB/nodes=10 failed - [(roachtest).restore2TB/nodes=10 failed](https://teamcity.cockroachdb.com/viewLog.html?buildId=2859883&tab=buildLog) on [release-21.1@389cbd4be0e9ce22ca7789cd61802f1f90392c97](https://github.com/cockroachdb/cockroach/commits/389cbd4be0e9ce22ca7789cd61802f1f90392c97):212 213```214 cluster.go:2254,restore.go:257,cluster.go:2666,errgroup.go:57: output in run_080247.373_n1_cockroach_sql: /home/agent/work/.go/src/github.com/cockroachdb/cockroach/bin/roachprod run teamcity-2859883-1617861597-21-n10cpu4:1 -- ./cockroach sql --insecure -e "": context canceled215 (1) attached stack trace216 -- stack trace:217 | main.(*cluster).RunE218 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2332219 | main.(*cluster).Run220 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2252221 | main.registerRestore.func1.1222 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/restore.go:257223 | main.(*monitor).Go.func1224 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2666225 | golang.org/x/sync/errgroup.(*Group).Go.func1226 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/vendor/golang.org/x/sync/errgroup/errgroup.go:57227 | runtime.goexit228 | /usr/local/go/src/runtime/asm_amd64.s:1374229 Wraps: (2) output in run_080247.373_n1_cockroach_sql230 Wraps: (3) /home/agent/work/.go/src/github.com/cockroachdb/cockroach/bin/roachprod run teamcity-2859883-1617861597-21-n10cpu4:1 -- ./cockroach sql --insecure -e ""231 | RESTORE csv.bank FROM232 | 'gs://cockroach-fixtures/workload/bank/version=1.0.0,payload-bytes=10240,ranges=0,rows=65104166,seed=1/bank'233 | WITH into_db = 'restore2tb'"" returned234 | stderr:235 |236 | stdout:237 Wraps: (4) secondary error attachment238 | signal: killed239 | (1) signal: killed240 | Error types: (1) *exec.ExitError241 Wraps: (5) context canceled242 Error types: (1) *withstack.withStack (2) *errutil.withPrefix (3) *main.withCommandDetails (4) *secondary.withSecondaryError (5) *errors.errorString243 244 cluster.go:2688,restore.go:264,test_runner.go:767: monitor failure: monitor task failed: context canceled245 (1) attached stack trace246 -- stack trace:247 | main.(*monitor).WaitE248 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2676249 | main.(*monitor).Wait250 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2684251 | main.registerRestore.func1252 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/restore.go:264253 | [...repeated from below...]254 Wraps: (2) monitor failure255 Wraps: (3) attached stack trace256 -- stack trace:257 | main.(*monitor).wait.func2258 | /home/agent/work/.go/src/github.com/cockroachdb/cockroach/pkg/cmd/roachtest/cluster.go:2732259 | runtime.goexit260 | /usr/local/go/src/runtime/asm_amd64.s:1374261 Wraps: (4) monitor task failed262 Wraps: (5) context canceled263 Error types: (1) *withstack.withStack (2) *errutil.withPrefix (3) *withstack.withStack (4) *errutil.withPrefix (5) *errors.errorString264 265```266 267<details><summary>More</summary><p>268 269 270Artifacts: [/restore2TB/nodes=10](https://teamcity.cockroachdb.com/viewLog.html?buildId=2859883&tab=artifacts#/restore2TB/nodes=10)271Related:272- #61396 roachtest: restore2TB/nodes=10 failed [stuck in kv] [C-test-failure](https://api.github.com/repos/cockroachdb/cockroach/labels/C-test-failure) [GA-blocker](https://api.github.com/repos/cockroachdb/cockroach/labels/GA-blocker) [O-roachtest](https://api.github.com/repos/cockroachdb/cockroach/labels/O-roachtest) [O-robot](https://api.github.com/repos/cockroachdb/cockroach/labels/O-robot) [branch-master](https://api.github.com/repos/cockroachdb/cockroach/labels/branch-master)273 274[See this test on roachdash](https://roachdash.crdb.dev/?filter=status%3Aopen+t%3A.%2Arestore2TB%2Fnodes%3D10.%2A&sort=title&restgroup=false&display=lastcommented+project)275<sub>powered by [pkg/cmd/internal/issues](https://github.com/cockroachdb/cockroach/tree/master/pkg/cmd/internal/issues)</sub></p></details>276",0,roachtest nodes failed on cluster go restore go cluster go errgroup go output in run cockroach sql home agent work go src github com cockroachdb cockroach bin roachprod run teamcity cockroach sql insecure e context canceled attached stack trace stack trace main cluster rune home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go main cluster run home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go main registerrestore home agent work go src github com cockroachdb cockroach pkg cmd roachtest restore go main monitor go home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go golang org x sync errgroup group go home agent work go src github com cockroachdb cockroach vendor golang org x sync errgroup errgroup go runtime goexit usr local go src runtime asm s wraps output in run cockroach sql wraps home agent work go src github com cockroachdb cockroach bin roachprod run teamcity cockroach sql insecure e restore csv bank from gs cockroach fixtures workload bank version payload bytes ranges rows seed bank with into db returned stderr stdout wraps secondary error attachment signal killed signal killed error types exec exiterror wraps context canceled error types withstack withstack errutil withprefix main withcommanddetails secondary withsecondaryerror errors errorstring cluster go restore go test runner go monitor failure monitor task failed context canceled attached stack trace stack trace main monitor waite home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go main monitor wait home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go main registerrestore home agent work go src github com cockroachdb cockroach pkg cmd roachtest restore go wraps monitor failure wraps attached stack trace stack trace main monitor wait home agent work go src github com cockroachdb cockroach pkg cmd roachtest cluster go runtime goexit usr local go src runtime asm s wraps monitor task failed wraps context canceled error types withstack withstack errutil withprefix withstack withstack errutil withprefix errors errorstring more artifacts related roachtest nodes failed powered by ,02773592,6505422239.0,IssuesEvent,2017-08-24 02:51:00,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,closed,[compatibility] SYSDATE() is different from mysql,compatibility,"1. What did you do?
278If possible, provide a recipe for reproducing the error.
279`SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();`
280
2812. What did you expect to see?
282```
283mysql> SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();
284+---------------------+----------+---------------------+----------+---------------------+
285| SYSDATE() | SLEEP(1) | SYSDATE() | SLEEP(2) | SYSDATE() |
286+---------------------+----------+---------------------+----------+---------------------+
287| 2017-08-18 22:33:51 | 0 | 2017-08-18 22:33:52 | 0 | 2017-08-18 22:33:54 |
288+---------------------+----------+---------------------+----------+---------------------+
2891 row in set (3.01 sec)
290```
291
292
2933. What did you see instead?
294
295in TiDB SYSDATE() behaves the same as now(), it returns statement begin time but not execute time
296```
297MySQL [(none)]> SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();
298+---------------------+----------+---------------------+----------+---------------------+
299| SYSDATE() | SLEEP(1) | SYSDATE() | SLEEP(2) | SYSDATE() |
300+---------------------+----------+---------------------+----------+---------------------+
301| 2017-08-18 22:33:44 | 0 | 2017-08-18 22:33:44 | 0 | 2017-08-18 22:33:44 |
302+---------------------+----------+---------------------+----------+---------------------+
3031 row in set (3.00 sec)
304```
305
306
3074. What version of TiDB are you using (`tidb-server -V`)?
308Git Commit Hash: 365e4ab491b683a69c2004f30b1ae4f86256e2ad
309Git Commit Branch: master
310UTC Build Time: 2017-08-16 01:24:27
311",True,"[compatibility] SYSDATE() is different from mysql - 1. What did you do?
312If possible, provide a recipe for reproducing the error.
313`SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();`
314
3152. What did you expect to see?
316```
317mysql> SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();
318+---------------------+----------+---------------------+----------+---------------------+
319| SYSDATE() | SLEEP(1) | SYSDATE() | SLEEP(2) | SYSDATE() |
320+---------------------+----------+---------------------+----------+---------------------+
321| 2017-08-18 22:33:51 | 0 | 2017-08-18 22:33:52 | 0 | 2017-08-18 22:33:54 |
322+---------------------+----------+---------------------+----------+---------------------+
3231 row in set (3.01 sec)
324```
325
326
3273. What did you see instead?
328
329in TiDB SYSDATE() behaves the same as now(), it returns statement begin time but not execute time
330```
331MySQL [(none)]> SELECT SYSDATE(), SLEEP(1), SYSDATE(), SLEEP(2), SYSDATE();
332+---------------------+----------+---------------------+----------+---------------------+
333| SYSDATE() | SLEEP(1) | SYSDATE() | SLEEP(2) | SYSDATE() |
334+---------------------+----------+---------------------+----------+---------------------+
335| 2017-08-18 22:33:44 | 0 | 2017-08-18 22:33:44 | 0 | 2017-08-18 22:33:44 |
336+---------------------+----------+---------------------+----------+---------------------+
3371 row in set (3.00 sec)
338```
339
340
3414. What version of TiDB are you using (`tidb-server -V`)?
342Git Commit Hash: 365e4ab491b683a69c2004f30b1ae4f86256e2ad
343Git Commit Branch: master
344UTC Build Time: 2017-08-16 01:24:27
345",1, sysdate is different from mysql what did you do if possible provide a recipe for reproducing the error select sysdate sleep sysdate sleep sysdate what did you expect to see mysql select sysdate sleep sysdate sleep sysdate sysdate sleep sysdate sleep sysdate row in set sec what did you see instead in tidb sysdate behaves the same as now it returns statement begin time but not execute time mysql select sysdate sleep sysdate sleep sysdate sysdate sleep sysdate sleep sysdate row in set sec what version of tidb are you using tidb server v git commit hash git commit branch master utc build time ,1346670895,22709354303.0,IssuesEvent,2022-07-05 17:37:03,brave/brave-browser,https://api.github.com/repos/brave/brave-browser,closed,"[Android] Visiting some websites offers to ""Show simplified view"" for page, even when the option is disabled",priority/P4 QA/Yes repros-on-chrome Chromium/waiting upstream OS/Android,"<!-- Have you searched for similar issues? Before submitting this issue, please check the open issues and add a note before logging a new issue.
347
348PLEASE USE THE TEMPLATE BELOW TO PROVIDE INFORMATION ABOUT THE ISSUE.
349INSUFFICIENT INFO WILL GET THE ISSUE CLOSED. IT WILL ONLY BE REOPENED AFTER SUFFICIENT INFO IS PROVIDED-->
350
351## Description <!-- Provide a brief description of the issue -->
352For certain pages and/or under certain conditions, users are asked if they want to view a ""Simplified view"" for the page, even if that option is disabled in `Settings --> Accessibility`. While the conditions required make it a rare occurrence, it is worth mentioning, given that if the option is not selected/enabled, you should not be offered the option at all.
353
354## Steps to reproduce <!-- Please add a series of steps to reproduce the issue -->
355
3561. Make sure Settings > Accessibility > Simplified view for web pages (Offer to show articles in simplified view, when supported) = disabled
3572. Make sure menu > Desktop site = disabled
3583. Visit https://ibkr.info/node/3290 3
359## Actual result <!-- Please add screenshots if needed -->
360Offer to `Show simplified page` appears
361
362## Expected result
363`Show simplified page` offer should not appear.
364
365## Issue reproduces how often <!-- [Easily reproduced/Intermittent issue/No steps to reproduce] -->
366Easily.
367
368## Version/Channel Information:
369<!--Does this issue happen on any other channels? Or is it specific to a certain channel?-->
370
371- Can you reproduce this issue with the current Play Store version? Yes
372- Can you reproduce this issue with the current Play Store Beta version? Yes
373- Can you reproduce this issue with the current Play Store Nightly version? Yes
374
375## Brave version
376v1.21.76
377
378### Website problems only
379- Does the issue resolve itself when disabling Brave Shields? N/A
380- Does the issue resolve itself when disabling Brave Rewards? N/A
381- Is the issue reproducible on the latest version of Chrome? N/A
382
383### Additional information
384<!-- Any additional information, related issues, extra QA steps, configuration or data that might be necessary to reproduce the issue -->
385User reports:
386https://community.brave.com/t/x-buttons-not-functional-design-and-features-how-to-make-brave-even-more-revolutionary/171930/5
387
388Additional steps to reproduce on a different website (taken from user directly):
389
390> 1. set Settings > Accessibility > Simplified view for webpages = disabled
391> 2. close all Private tabs (if you have any)
392> 5. open new Private tab
393> 6. (this has the same effect as clearing site data for this purpose)
394> 8. make sure: menu > Desktop site = disabled
395> 10. visit https://en.wikipedia.org/wiki/Auction_theory (it’ll redirect to mobile version)
396> 14. Scroll to bottom, tap “Desktop” hyperlink
397> 16. In the first paragraph of the article, tap “market failure” hyperlink
398> 18. You should see the “Show simplified view” bar when the “market failure” page loads (if not, try going through to a couple more articles). The bar isn’t supposed to be presented to the user since you disabled it in step 1 above. Therefore, it’s a bug. :slight_smile: Now if you tap Back, the bar will appear on previous article also.",1.0,"[Android] Visiting some websites offers to ""Show simplified view"" for page, even when the option is disabled - <!-- Have you searched for similar issues? Before submitting this issue, please check the open issues and add a note before logging a new issue.
399
400PLEASE USE THE TEMPLATE BELOW TO PROVIDE INFORMATION ABOUT THE ISSUE.
401INSUFFICIENT INFO WILL GET THE ISSUE CLOSED. IT WILL ONLY BE REOPENED AFTER SUFFICIENT INFO IS PROVIDED-->
402
403## Description <!-- Provide a brief description of the issue -->
404For certain pages and/or under certain conditions, users are asked if they want to view a ""Simplified view"" for the page, even if that option is disabled in `Settings --> Accessibility`. While the conditions required make it a rare occurrence, it is worth mentioning, given that if the option is not selected/enabled, you should not be offered the option at all.
405
406## Steps to reproduce <!-- Please add a series of steps to reproduce the issue -->
407
4081. Make sure Settings > Accessibility > Simplified view for web pages (Offer to show articles in simplified view, when supported) = disabled
4092. Make sure menu > Desktop site = disabled
4103. Visit https://ibkr.info/node/3290 3
411## Actual result <!-- Please add screenshots if needed -->
412Offer to `Show simplified page` appears
413
414## Expected result
415`Show simplified page` offer should not appear.
416
417## Issue reproduces how often <!-- [Easily reproduced/Intermittent issue/No steps to reproduce] -->
418Easily.
419
420## Version/Channel Information:
421<!--Does this issue happen on any other channels? Or is it specific to a certain channel?-->
422
423- Can you reproduce this issue with the current Play Store version? Yes
424- Can you reproduce this issue with the current Play Store Beta version? Yes
425- Can you reproduce this issue with the current Play Store Nightly version? Yes
426
427## Brave version
428v1.21.76
429
430### Website problems only
431- Does the issue resolve itself when disabling Brave Shields? N/A
432- Does the issue resolve itself when disabling Brave Rewards? N/A
433- Is the issue reproducible on the latest version of Chrome? N/A
434
435### Additional information
436<!-- Any additional information, related issues, extra QA steps, configuration or data that might be necessary to reproduce the issue -->
437User reports:
438https://community.brave.com/t/x-buttons-not-functional-design-and-features-how-to-make-brave-even-more-revolutionary/171930/5
439
440Additional steps to reproduce on a different website (taken from user directly):
441
442> 1. set Settings > Accessibility > Simplified view for webpages = disabled
443> 2. close all Private tabs (if you have any)
444> 5. open new Private tab
445> 6. (this has the same effect as clearing site data for this purpose)
446> 8. make sure: menu > Desktop site = disabled
447> 10. visit https://en.wikipedia.org/wiki/Auction_theory (it’ll redirect to mobile version)
448> 14. Scroll to bottom, tap “Desktop” hyperlink
449> 16. In the first paragraph of the article, tap “market failure” hyperlink
450> 18. You should see the “Show simplified view” bar when the “market failure” page loads (if not, try going through to a couple more articles). The bar isn’t supposed to be presented to the user since you disabled it in step 1 above. Therefore, it’s a bug. :slight_smile: Now if you tap Back, the bar will appear on previous article also.",0, visiting some websites offers to show simplified view for page even when the option is disabled have you searched for similar issues before submitting this issue please check the open issues and add a note before logging a new issue please use the template below to provide information about the issue insufficient info will get the issue closed it will only be reopened after sufficient info is provided description for certain pages and or under certain conditions users are asked if they want to view a simplified view for the page even if that option is disabled in settings accessibility while the conditions required make it a rare occurrence it is worth mentioning given that if the option is not selected enabled you should not be offered the option at all steps to reproduce make sure settings accessibility simplified view for web pages offer to show articles in simplified view when supported disabled make sure menu desktop site disabled visit actual result offer to show simplified page appears expected result show simplified page offer should not appear issue reproduces how often easily version channel information can you reproduce this issue with the current play store version yes can you reproduce this issue with the current play store beta version yes can you reproduce this issue with the current play store nightly version yes brave version website problems only does the issue resolve itself when disabling brave shields n a does the issue resolve itself when disabling brave rewards n a is the issue reproducible on the latest version of chrome n a additional information user reports additional steps to reproduce on a different website taken from user directly set settings accessibility simplified view for webpages disabled close all private tabs if you have any open new private tab this has the same effect as clearing site data for this purpose make sure menu desktop site disabled visit it’ll redirect to mobile version scroll to bottom tap “desktop” hyperlink in the first paragraph of the article tap “market failure” hyperlink you should see the “show simplified view” bar when the “market failure” page loads if not try going through to a couple more articles the bar isn’t supposed to be presented to the user since you disabled it in step above therefore it’s a bug slight smile now if you tap back the bar will appear on previous article also ,0451346139,30869223545.0,IssuesEvent,2023-08-03 10:07:49,ita-social-projects/Space2Study-Client-mvp,https://api.github.com/repos/ita-social-projects/Space2Study-Client-mvp,opened,"(SP: 1) Write unit test for ""GeneralInfoStep"" container",FrontEnd part Unit test,"### Container unit test452Unit test for ""**AddPhotoStep**"" container453Scenaries descriptions:454- [ ] Container should rendered455- [ ] Check if the buttons passed in props is in the document456 457[Link to component](https://github.com/ita-social-projects/Space2Study-Client-mvp/blob/develop/src/containers/tutor-home-page/general-info-step/GeneralInfoStep.jsx)458 459Current coverage:460",1.0,"(SP: 1) Write unit test for ""GeneralInfoStep"" container - ### Container unit test461Unit test for ""**AddPhotoStep**"" container462Scenaries descriptions:463- [ ] Container should rendered464- [ ] Check if the buttons passed in props is in the document465 466[Link to component](https://github.com/ita-social-projects/Space2Study-Client-mvp/blob/develop/src/containers/tutor-home-page/general-info-step/GeneralInfoStep.jsx)467 468Current coverage:469",0, sp write unit test for generalinfostep container container unit test unit test for addphotostep container scenaries descriptions container should rendered check if the buttons passed in props is in the document current coverage ,04703849,6705903836.0,IssuesEvent,2017-10-12 03:25:33,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,opened,group by with alias variable not consistent with MySQL.,compatibility,"test.sql:
471
472```
473DROP TABLE IF EXISTS t1;
474SET sql_mode = 'NO_ENGINE_SUBSTITUTION';
475CREATE TABLE t1 (
476cont_nr int(11) NOT NULL auto_increment,
477ver_nr int(11) NOT NULL default '0',
478aufnr int(11) NOT NULL default '0',
479username varchar(50) NOT NULL default '',
480hdl_nr int(11) NOT NULL default '0',
481eintrag date NOT NULL default '0000-00-00',
482st_klasse varchar(40) NOT NULL default '',
483st_wert varchar(40) NOT NULL default '',
484st_zusatz varchar(40) NOT NULL default '',
485st_bemerkung varchar(255) NOT NULL default '',
486kunden_art varchar(40) NOT NULL default '',
487mcbs_knr int(11) default NULL,
488mcbs_aufnr int(11) NOT NULL default '0',
489schufa_status char(1) default '?',
490bemerkung text,
491wirknetz text,
492wf_igz int(11) NOT NULL default '0',
493tarifcode varchar(80) default NULL,
494recycle char(1) default NULL,
495sim varchar(30) default NULL,
496mcbs_tpl varchar(30) default NULL,
497emp_nr int(11) NOT NULL default '0',
498laufzeit int(11) default NULL,
499hdl_name varchar(30) default NULL,
500prov_hdl_nr int(11) NOT NULL default '0',
501auto_wirknetz varchar(50) default NULL,
502auto_billing varchar(50) default NULL,
503touch timestamp NOT NULL,
504kategorie varchar(50) default NULL,
505kundentyp varchar(20) NOT NULL default '',
506sammel_rech_msisdn varchar(30) NOT NULL default '',
507p_nr varchar(9) NOT NULL default '',
508suffix char(3) NOT NULL default '',
509PRIMARY KEY (cont_nr),
510KEY idx_aufnr(aufnr),
511KEY idx_hdl_nr(hdl_nr),
512KEY idx_st_klasse(st_klasse),
513KEY ver_nr(ver_nr),
514KEY eintrag_idx(eintrag),
515KEY emp_nr_idx(emp_nr),
516KEY wf_igz(wf_igz),
517KEY touch(touch),
518KEY hdl_tag(eintrag,hdl_nr),
519KEY prov_hdl_nr(prov_hdl_nr),
520KEY mcbs_aufnr(mcbs_aufnr),
521KEY kundentyp(kundentyp),
522KEY p_nr(p_nr,suffix)
523);
524INSERT INTO t1 VALUES (3359356,405,3359356,'Mustermann Musterfrau',52500,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1485525,2122316,'+','','N',1909160,'MobilComSuper92000D2',NULL,NULL,'MS9ND2',3,24,'MobilCom Shop Koeln',52500,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
525INSERT INTO t1 VALUES (3359357,468,3359357,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1503580,2139699,'+','','P',1909171,'MobilComSuper9D1T10SFreisprech(Akquise)',NULL,NULL,'MS9NS1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
526INSERT INTO t1 VALUES (3359358,407,3359358,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1501358,2137473,'N','','N',1909159,'MobilComSuper92000D2',NULL,NULL,'MS9ND2',325,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
527INSERT INTO t1 VALUES (3359359,468,3359359,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1507831,2143894,'+','','P',1909162,'MobilComSuper9D1T10SFreisprech(Akquise)',NULL,NULL,'MS9NS1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
528INSERT INTO t1 VALUES (3359360,0,0,'Mustermann Musterfrau',29674907,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1900169997,2414578,'+',NULL,'N',1909148,'',NULL,NULL,'RV99066_2',20,NULL,'POS',29674907,NULL,NULL,20010202105916,'Mobilfunk','','','97317481','007');
529INSERT INTO t1 VALUES (3359361,406,3359361,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag storniert','','(7001-84):Storno, Kd. m�chte nicht mehr','privat',NULL,0,'+','','P',1909150,'MobilComSuper92000D1(Akquise)',NULL,NULL,'MS9ND1',325,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
530INSERT INTO t1 VALUES (3359362,406,3359362,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1509984,2145874,'+','','P',1909154,'MobilComSuper92000D1(Akquise)',NULL,NULL,'MS9ND1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
531SELECT ELT(FIELD(kundentyp,'PP','PPA','PG','PGA','FK','FKA','FP','FPA','K','KA','V','VA',''), 'Privat (Private Nutzung)','Privat (Private Nutzung) Sitz im Ausland','Privat (geschaeftliche Nutzung)','Privat (geschaeftliche Nutzung) Sitz im Ausland','Firma (Kapitalgesellschaft)','Firma (Kapitalgesellschaft) Sitz im Ausland','Firma (Personengesellschaft)','Firma (Personengesellschaft) Sitz im Ausland','oeff. rechtl. Koerperschaft','oeff. rechtl. Koerperschaft Sitz im Ausland','Eingetragener Verein','Eingetragener Verein Sitz im Ausland','Typ unbekannt') AS Kundentyp ,kategorie FROM t1 WHERE hdl_nr < 2000000 AND kategorie IN ('Prepaid','Mobilfunk') AND st_klasse = 'Workflow' GROUP BY kundentyp ORDER BY kategorie;
532```
533
534MySQL got:
535
536```
537+--------------------------+-----------+
538| Kundentyp | kategorie |
539+--------------------------+-----------+
540| Privat (Private Nutzung) | Mobilfunk |
541+--------------------------+-----------+
5421 row in set, 1 warning (0.00 sec)
543
544mysql> show warnings;
545+---------+------+----------------------------------------------------+
546| Level | Code | Message |
547+---------+------+----------------------------------------------------+
548| Warning | 1052 | Column 'kundentyp' in group statement is ambiguous |
549+---------+------+----------------------------------------------------+
5501 row in set (0.00 sec)
551```
552
553but TiDB got empty set;
554
555
556
557",True,"group by with alias variable not consistent with MySQL. - test.sql:
558
559```
560DROP TABLE IF EXISTS t1;
561SET sql_mode = 'NO_ENGINE_SUBSTITUTION';
562CREATE TABLE t1 (
563cont_nr int(11) NOT NULL auto_increment,
564ver_nr int(11) NOT NULL default '0',
565aufnr int(11) NOT NULL default '0',
566username varchar(50) NOT NULL default '',
567hdl_nr int(11) NOT NULL default '0',
568eintrag date NOT NULL default '0000-00-00',
569st_klasse varchar(40) NOT NULL default '',
570st_wert varchar(40) NOT NULL default '',
571st_zusatz varchar(40) NOT NULL default '',
572st_bemerkung varchar(255) NOT NULL default '',
573kunden_art varchar(40) NOT NULL default '',
574mcbs_knr int(11) default NULL,
575mcbs_aufnr int(11) NOT NULL default '0',
576schufa_status char(1) default '?',
577bemerkung text,
578wirknetz text,
579wf_igz int(11) NOT NULL default '0',
580tarifcode varchar(80) default NULL,
581recycle char(1) default NULL,
582sim varchar(30) default NULL,
583mcbs_tpl varchar(30) default NULL,
584emp_nr int(11) NOT NULL default '0',
585laufzeit int(11) default NULL,
586hdl_name varchar(30) default NULL,
587prov_hdl_nr int(11) NOT NULL default '0',
588auto_wirknetz varchar(50) default NULL,
589auto_billing varchar(50) default NULL,
590touch timestamp NOT NULL,
591kategorie varchar(50) default NULL,
592kundentyp varchar(20) NOT NULL default '',
593sammel_rech_msisdn varchar(30) NOT NULL default '',
594p_nr varchar(9) NOT NULL default '',
595suffix char(3) NOT NULL default '',
596PRIMARY KEY (cont_nr),
597KEY idx_aufnr(aufnr),
598KEY idx_hdl_nr(hdl_nr),
599KEY idx_st_klasse(st_klasse),
600KEY ver_nr(ver_nr),
601KEY eintrag_idx(eintrag),
602KEY emp_nr_idx(emp_nr),
603KEY wf_igz(wf_igz),
604KEY touch(touch),
605KEY hdl_tag(eintrag,hdl_nr),
606KEY prov_hdl_nr(prov_hdl_nr),
607KEY mcbs_aufnr(mcbs_aufnr),
608KEY kundentyp(kundentyp),
609KEY p_nr(p_nr,suffix)
610);
611INSERT INTO t1 VALUES (3359356,405,3359356,'Mustermann Musterfrau',52500,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1485525,2122316,'+','','N',1909160,'MobilComSuper92000D2',NULL,NULL,'MS9ND2',3,24,'MobilCom Shop Koeln',52500,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
612INSERT INTO t1 VALUES (3359357,468,3359357,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1503580,2139699,'+','','P',1909171,'MobilComSuper9D1T10SFreisprech(Akquise)',NULL,NULL,'MS9NS1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
613INSERT INTO t1 VALUES (3359358,407,3359358,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1501358,2137473,'N','','N',1909159,'MobilComSuper92000D2',NULL,NULL,'MS9ND2',325,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
614INSERT INTO t1 VALUES (3359359,468,3359359,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1507831,2143894,'+','','P',1909162,'MobilComSuper9D1T10SFreisprech(Akquise)',NULL,NULL,'MS9NS1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
615INSERT INTO t1 VALUES (3359360,0,0,'Mustermann Musterfrau',29674907,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1900169997,2414578,'+',NULL,'N',1909148,'',NULL,NULL,'RV99066_2',20,NULL,'POS',29674907,NULL,NULL,20010202105916,'Mobilfunk','','','97317481','007');
616INSERT INTO t1 VALUES (3359361,406,3359361,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag storniert','','(7001-84):Storno, Kd. m�chte nicht mehr','privat',NULL,0,'+','','P',1909150,'MobilComSuper92000D1(Akquise)',NULL,NULL,'MS9ND1',325,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
617INSERT INTO t1 VALUES (3359362,406,3359362,'Mustermann Musterfrau',7001,'2000-05-20','workflow','Auftrag erledigt','Originalvertrag eingegangen und gepr�ft','','privat',1509984,2145874,'+','','P',1909154,'MobilComSuper92000D1(Akquise)',NULL,NULL,'MS9ND1',327,24,'MobilCom Intern',7003,NULL,'auto',20010202105916,'Mobilfunk','PP','','','');
618SELECT ELT(FIELD(kundentyp,'PP','PPA','PG','PGA','FK','FKA','FP','FPA','K','KA','V','VA',''), 'Privat (Private Nutzung)','Privat (Private Nutzung) Sitz im Ausland','Privat (geschaeftliche Nutzung)','Privat (geschaeftliche Nutzung) Sitz im Ausland','Firma (Kapitalgesellschaft)','Firma (Kapitalgesellschaft) Sitz im Ausland','Firma (Personengesellschaft)','Firma (Personengesellschaft) Sitz im Ausland','oeff. rechtl. Koerperschaft','oeff. rechtl. Koerperschaft Sitz im Ausland','Eingetragener Verein','Eingetragener Verein Sitz im Ausland','Typ unbekannt') AS Kundentyp ,kategorie FROM t1 WHERE hdl_nr < 2000000 AND kategorie IN ('Prepaid','Mobilfunk') AND st_klasse = 'Workflow' GROUP BY kundentyp ORDER BY kategorie;
619```
620
621MySQL got:
622
623```
624+--------------------------+-----------+
625| Kundentyp | kategorie |
626+--------------------------+-----------+
627| Privat (Private Nutzung) | Mobilfunk |
628+--------------------------+-----------+
6291 row in set, 1 warning (0.00 sec)
630
631mysql> show warnings;
632+---------+------+----------------------------------------------------+
633| Level | Code | Message |
634+---------+------+----------------------------------------------------+
635| Warning | 1052 | Column 'kundentyp' in group statement is ambiguous |
636+---------+------+----------------------------------------------------+
6371 row in set (0.00 sec)
638```
639
640but TiDB got empty set;
641
642
643
644",1,group by with alias variable not consistent with mysql test sql drop table if exists set sql mode no engine substitution create table cont nr int not null auto increment ver nr int not null default aufnr int not null default username varchar not null default hdl nr int not null default eintrag date not null default st klasse varchar not null default st wert varchar not null default st zusatz varchar not null default st bemerkung varchar not null default kunden art varchar not null default mcbs knr int default null mcbs aufnr int not null default schufa status char default bemerkung text wirknetz text wf igz int not null default tarifcode varchar default null recycle char default null sim varchar default null mcbs tpl varchar default null emp nr int not null default laufzeit int default null hdl name varchar default null prov hdl nr int not null default auto wirknetz varchar default null auto billing varchar default null touch timestamp not null kategorie varchar default null kundentyp varchar not null default sammel rech msisdn varchar not null default p nr varchar not null default suffix char not null default primary key cont nr key idx aufnr aufnr key idx hdl nr hdl nr key idx st klasse st klasse key ver nr ver nr key eintrag idx eintrag key emp nr idx emp nr key wf igz wf igz key touch touch key hdl tag eintrag hdl nr key prov hdl nr prov hdl nr key mcbs aufnr mcbs aufnr key kundentyp kundentyp key p nr p nr suffix insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat n null null mobilcom shop koeln null auto mobilfunk pp insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat p akquise null null mobilcom intern null auto mobilfunk pp insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat n n null null mobilcom intern null auto mobilfunk pp insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat p akquise null null mobilcom intern null auto mobilfunk pp insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat null n null null null pos null null mobilfunk insert into values mustermann musterfrau workflow auftrag storniert storno kd m�chte nicht mehr privat null p akquise null null mobilcom intern null auto mobilfunk pp insert into values mustermann musterfrau workflow auftrag erledigt originalvertrag eingegangen und gepr�ft privat p akquise null null mobilcom intern null auto mobilfunk pp select elt field kundentyp pp ppa pg pga fk fka fp fpa k ka v va privat private nutzung privat private nutzung sitz im ausland privat geschaeftliche nutzung privat geschaeftliche nutzung sitz im ausland firma kapitalgesellschaft firma kapitalgesellschaft sitz im ausland firma personengesellschaft firma personengesellschaft sitz im ausland oeff rechtl koerperschaft oeff rechtl koerperschaft sitz im ausland eingetragener verein eingetragener verein sitz im ausland typ unbekannt as kundentyp kategorie from where hdl nr and kategorie in prepaid mobilfunk and st klasse workflow group by kundentyp order by kategorie mysql got kundentyp kategorie privat private nutzung mobilfunk row in set warning sec mysql show warnings level code message warning column kundentyp in group statement is ambiguous row in set sec but tidb got empty set ,164565493,14727876424.0,IssuesEvent,2021-01-06 09:11:07,Seagate/cortx-s3server,https://api.github.com/repos/Seagate/cortx-s3server,closed,CVE-2018-16468 (Medium) detected in loofah-2.0.3.gem,needs-attention needs-triage security vulnerability,"## CVE-2018-16468 - Medium Severity Vulnerability646<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>loofah-2.0.3.gem</b></p></summary>647 648<p>Loofah is a general library for manipulating and transforming HTML/XML649documents and fragments. It's built on top of Nokogiri and libxml2, so650it's fast and has a nice API.651 652Loofah excels at HTML sanitization (XSS prevention). It includes some653nice HTML sanitizers, which are based on HTML5lib's whitelist, so it654most likely won't make your codes less secure. (These statements have655not been evaluated by Netexperts.)656 657ActiveRecord extensions for sanitization are available in the658`loofah-activerecord` gem (see659https://github.com/flavorjones/loofah-activerecord).</p>660<p>Library home page: <a href=""https://rubygems.org/gems/loofah-2.0.3.gem"">https://rubygems.org/gems/loofah-2.0.3.gem</a></p>661<p>662 663Dependency Hierarchy:664 - coffee-rails-4.1.0.gem (Root Library)665 - railties-4.2.2.gem666 - actionpack-4.2.2.gem667 - rails-html-sanitizer-1.0.2.gem668 - :x: **loofah-2.0.3.gem** (Vulnerable Library)669<p>Found in HEAD commit: <a href=""https://github.com/Seagate/cortx-s3server/commit/fde64200b4f94603ae17220b98da6422a531445e"">fde64200b4f94603ae17220b98da6422a531445e</a></p>670<p>Found in base branch: <b>main</b></p>671</p>672</details>673<p></p>674<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png' width=19 height=20> Vulnerability Details</summary>675<p> 676 677In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.678 679<p>Publish Date: 2018-10-30680<p>URL: <a href=https://vuln.whitesourcesoftware.com/vulnerability/CVE-2018-16468>CVE-2018-16468</a></p>681</p>682</details>683<p></p>684<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS 3 Score Details (<b>5.4</b>)</summary>685<p>686 687Base Score Metrics:688- Exploitability Metrics:689 - Attack Vector: Network690 - Attack Complexity: Low691 - Privileges Required: Low692 - User Interaction: Required693 - Scope: Changed694- Impact Metrics:695 - Confidentiality Impact: Low696 - Integrity Impact: Low697 - Availability Impact: None698</p>699For more information on CVSS3 Scores, click <a href=""https://www.first.org/cvss/calculator/3.0"">here</a>.700</p>701</details>702<p></p>703<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/suggested_fix.png' width=19 height=20> Suggested Fix</summary>704<p>705 706<p>Type: Upgrade version</p>707<p>Origin: <a href=""http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16468"">http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16468</a></p>708<p>Release Date: 2018-10-30</p>709<p>Fix Resolution: loofah - 2.3.0</p>710 711</p>712</details>713<p></p>714 715***716Step up your Open Source Security Game with WhiteSource [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)",True,"CVE-2018-16468 (Medium) detected in loofah-2.0.3.gem - ## CVE-2018-16468 - Medium Severity Vulnerability717<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>loofah-2.0.3.gem</b></p></summary>718 719<p>Loofah is a general library for manipulating and transforming HTML/XML720documents and fragments. It's built on top of Nokogiri and libxml2, so721it's fast and has a nice API.722 723Loofah excels at HTML sanitization (XSS prevention). It includes some724nice HTML sanitizers, which are based on HTML5lib's whitelist, so it725most likely won't make your codes less secure. (These statements have726not been evaluated by Netexperts.)727 728ActiveRecord extensions for sanitization are available in the729`loofah-activerecord` gem (see730https://github.com/flavorjones/loofah-activerecord).</p>731<p>Library home page: <a href=""https://rubygems.org/gems/loofah-2.0.3.gem"">https://rubygems.org/gems/loofah-2.0.3.gem</a></p>732<p>733 734Dependency Hierarchy:735 - coffee-rails-4.1.0.gem (Root Library)736 - railties-4.2.2.gem737 - actionpack-4.2.2.gem738 - rails-html-sanitizer-1.0.2.gem739 - :x: **loofah-2.0.3.gem** (Vulnerable Library)740<p>Found in HEAD commit: <a href=""https://github.com/Seagate/cortx-s3server/commit/fde64200b4f94603ae17220b98da6422a531445e"">fde64200b4f94603ae17220b98da6422a531445e</a></p>741<p>Found in base branch: <b>main</b></p>742</p>743</details>744<p></p>745<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png' width=19 height=20> Vulnerability Details</summary>746<p> 747 748In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.749 750<p>Publish Date: 2018-10-30751<p>URL: <a href=https://vuln.whitesourcesoftware.com/vulnerability/CVE-2018-16468>CVE-2018-16468</a></p>752</p>753</details>754<p></p>755<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS 3 Score Details (<b>5.4</b>)</summary>756<p>757 758Base Score Metrics:759- Exploitability Metrics:760 - Attack Vector: Network761 - Attack Complexity: Low762 - Privileges Required: Low763 - User Interaction: Required764 - Scope: Changed765- Impact Metrics:766 - Confidentiality Impact: Low767 - Integrity Impact: Low768 - Availability Impact: None769</p>770For more information on CVSS3 Scores, click <a href=""https://www.first.org/cvss/calculator/3.0"">here</a>.771</p>772</details>773<p></p>774<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/suggested_fix.png' width=19 height=20> Suggested Fix</summary>775<p>776 777<p>Type: Upgrade version</p>778<p>Origin: <a href=""http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16468"">http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-16468</a></p>779<p>Release Date: 2018-10-30</p>780<p>Fix Resolution: loofah - 2.3.0</p>781 782</p>783</details>784<p></p>785 786***787Step up your Open Source Security Game with WhiteSource [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)",0,cve medium detected in loofah gem cve medium severity vulnerability vulnerable library loofah gem loofah is a general library for manipulating and transforming html xml documents and fragments it s built on top of nokogiri and so it s fast and has a nice api loofah excels at html sanitization xss prevention it includes some nice html sanitizers which are based on s whitelist so it most likely won t make your codes less secure these statements have not been evaluated by netexperts activerecord extensions for sanitization are available in the loofah activerecord gem see library home page a href dependency hierarchy coffee rails gem root library railties gem actionpack gem rails html sanitizer gem x loofah gem vulnerable library found in head commit a href found in base branch main vulnerability details in the loofah gem for ruby through unsanitized javascript may occur in sanitized output when a crafted svg element is republished publish date url a href cvss score details base score metrics exploitability metrics attack vector network attack complexity low privileges required low user interaction required scope changed impact metrics confidentiality impact low integrity impact low availability impact none for more information on scores click a href suggested fix type upgrade version origin a href release date fix resolution loofah step up your open source security game with whitesource ,07886989,9276492237.0,IssuesEvent,2019-03-20 03:10:09,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,closed,can not set variable in update statement,help wanted type/compatibility,"## Bug Report
789
790Please answer these questions before submitting your issue. Thanks!
791
7921. What did you do?
793If possible, provide a recipe for reproducing the error.
794
795```
796create table tt (id int, v int);
797insert into tt (id, v) values (1, 0);
798update tt set v = @lv := v + 1 where id = 1;
799select @lv;
800```
801
8022. What did you expect to see?
803
804```
805mysql> select @lv;
806+------+
807| @lv |
808+------+
809| 1 |
810+------+
8111 row in set (0.00 sec)
812
813
814mysql> select * from tt;
815+------+------+
816| id | v |
817+------+------+
818| 1 | 1 |
819+------+------+
8201 row in set (0.00 sec)
821```
822
8233. What did you see instead?
824
825```
826mysql> select @lv;
827+------+
828| @lv |
829+------+
830| NULL |
831+------+
8321 row in set (0.00 sec)
833
834mysql> select * from tt;
835+------+------+
836| id | v |
837+------+------+
838| 1 | NULL |
839+------+------+
8401 row in set (0.00 sec)
841```
842
8434. What version of TiDB are you using (`tidb-server -V` or run `select tidb_version();` on TiDB)?
844
845```
846Release Version: None
847Git Commit Hash: None
848Git Branch: None
849UTC Build Time: None
850GoVersion: None
851Race Enabled: false
852TiKV Min Version: 2.1.0-alpha.1-ff3dd160846b7d1aed9079c389fc188f7f5ea13e
853Check Table Before Drop: false
854```",True,"can not set variable in update statement - ## Bug Report
855
856Please answer these questions before submitting your issue. Thanks!
857
8581. What did you do?
859If possible, provide a recipe for reproducing the error.
860
861```
862create table tt (id int, v int);
863insert into tt (id, v) values (1, 0);
864update tt set v = @lv := v + 1 where id = 1;
865select @lv;
866```
867
8682. What did you expect to see?
869
870```
871mysql> select @lv;
872+------+
873| @lv |
874+------+
875| 1 |
876+------+
8771 row in set (0.00 sec)
878
879
880mysql> select * from tt;
881+------+------+
882| id | v |
883+------+------+
884| 1 | 1 |
885+------+------+
8861 row in set (0.00 sec)
887```
888
8893. What did you see instead?
890
891```
892mysql> select @lv;
893+------+
894| @lv |
895+------+
896| NULL |
897+------+
8981 row in set (0.00 sec)
899
900mysql> select * from tt;
901+------+------+
902| id | v |
903+------+------+
904| 1 | NULL |
905+------+------+
9061 row in set (0.00 sec)
907```
908
9094. What version of TiDB are you using (`tidb-server -V` or run `select tidb_version();` on TiDB)?
910
911```
912Release Version: None
913Git Commit Hash: None
914Git Branch: None
915UTC Build Time: None
916GoVersion: None
917Race Enabled: false
918TiKV Min Version: 2.1.0-alpha.1-ff3dd160846b7d1aed9079c389fc188f7f5ea13e
919Check Table Before Drop: false
920```",1,can not set variable in update statement bug report please answer these questions before submitting your issue thanks what did you do if possible provide a recipe for reproducing the error create table tt id int v int insert into tt id v values update tt set v lv v where id select lv what did you expect to see mysql select lv lv row in set sec mysql select from tt id v row in set sec what did you see instead mysql select lv lv null row in set sec mysql select from tt id v null row in set sec what version of tidb are you using tidb server v or run select tidb version on tidb release version none git commit hash none git branch none utc build time none goversion none race enabled false tikv min version alpha check table before drop false ,1921404584,27490940929.0,IssuesEvent,2023-03-04 16:06:48,g-walley/cegpy,https://api.github.com/repos/g-walley/cegpy,closed,Quick Start: Chain Event Graph,documentation,"Create a Quick Start reStructured (Sphinx) page for the `ChainEventGraph` class.
922Doc is located at: docs/quickstart_chain_event_graph.rst
923This can be based on the binder and should contain:
924- [ ] a description of what Chain Event Graphs are and their uses
925- [x] a comment that the staged tree needs to be created (and AHC needs to be run) in order to create the chain event graph
926- [x] create a basic chain event graph object and display the graph, with a description detailing what occurred when the CEG was created
927- [ ] Anything else of note",1.0,"Quick Start: Chain Event Graph - Create a Quick Start reStructured (Sphinx) page for the `ChainEventGraph` class.
928Doc is located at: docs/quickstart_chain_event_graph.rst
929This can be based on the binder and should contain:
930- [ ] a description of what Chain Event Graphs are and their uses
931- [x] a comment that the staged tree needs to be created (and AHC needs to be run) in order to create the chain event graph
932- [x] create a basic chain event graph object and display the graph, with a description detailing what occurred when the CEG was created
933- [ ] Anything else of note",0,quick start chain event graph create a quick start restructured sphinx page for the chaineventgraph class doc is located at docs quickstart chain event graph rst this can be based on the binder and should contain a description of what chain event graphs are and their uses a comment that the staged tree needs to be created and ahc needs to be run in order to create the chain event graph create a basic chain event graph object and display the graph with a description detailing what occurred when the ceg was created anything else of note,093412778,15044067321.0,IssuesEvent,2021-02-03 02:07:03,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,opened,mpp: the precision of avg(decimal) is wider than that from mysql,component/expression type/bug type/compatibility,"## Bug Report
935
936Please answer these questions before submitting your issue. Thanks!
937
938### 1. Minimal reproduce step (Required)
939create table test.t (id int, value decimal(6,3));
940alter table test.t set tiflash replica 1;
941insert into test.t values(1,2.3),(3,4.5),(5,6.7);
942insert into test.t values(null,null),(1,null),(null,3.3);
943
944<!-- a step by step guide for reproducing the bug. -->
945
946### 2. What did you expect to see? (Required)
947mysql> select avg(value) from t group by id;
948+------------+
949| avg(value) |
950+------------+
951| 2.3000000 |
952| 6.7000000 |
953| 4.5000000 |
954| 3.3000000 |
955+------------+
956
957
958### 3. What did you see instead (Required)
959````
960mysql> select avg(value) from t group by id;
961+---------------+
962| avg(value) |
963+---------------+
964| 2.30000000000 |
965| 6.70000000000 |
966| 4.50000000000 |
967| 3.30000000000 |
968+---------------+
969
970mysql> set @@tidb_allow_mpp=1;
971Query OK, 0 rows affected (0.00 sec)
972
973mysql> desc select avg(value) as av from t group by id having av>4;
974+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
975| id | estRows | task | access object | operator info |
976+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
977| Selection_7 | 3.60 | root | | gt(Column#4, 4) |
978| └─TableReader_30 | 4.50 | root | | data:ExchangeSender_29 |
979| └─ExchangeSender_29 | 4.50 | cop[tiflash] | | ExchangeType: PassThrough |
980| └─Projection_25 | 4.50 | cop[tiflash] | | if(eq(Column#8, 0), <nil>, div(Column#4, cast(Column#8, decimal(20,0) BINARY)))->Column#4 |
981| └─HashAgg_26 | 4.50 | cop[tiflash] | | group by:test.t.id, funcs:sum(Column#9)->Column#8, funcs:sum(Column#10)->Column#4 |
982| └─ExchangeReceiver_28 | 4.50 | cop[tiflash] | | |
983| └─ExchangeSender_27 | 4.50 | cop[tiflash] | | ExchangeType: HashPartition, Hash Cols: test.t.id |
984| └─HashAgg_11 | 4.50 | cop[tiflash] | | group by:test.t.id, funcs:count(test.t.value)->Column#9, funcs:sum(test.t.value)->Column#10 |
985| └─TableFullScan_24 | 9.00 | cop[tiflash] | table:t | keep order:false |
986+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
9879 rows in set (0.00 sec)
988```
989
990### 4. What is your TiDB version? (Required)
991master
992<!-- Paste the output of SELECT tidb_version() -->
993
994",True,"mpp: the precision of avg(decimal) is wider than that from mysql - ## Bug Report
995
996Please answer these questions before submitting your issue. Thanks!
997
998### 1. Minimal reproduce step (Required)
999create table test.t (id int, value decimal(6,3));
1000alter table test.t set tiflash replica 1;
1001insert into test.t values(1,2.3),(3,4.5),(5,6.7);
1002insert into test.t values(null,null),(1,null),(null,3.3);
1003
1004<!-- a step by step guide for reproducing the bug. -->
1005
1006### 2. What did you expect to see? (Required)
1007mysql> select avg(value) from t group by id;
1008+------------+
1009| avg(value) |
1010+------------+
1011| 2.3000000 |
1012| 6.7000000 |
1013| 4.5000000 |
1014| 3.3000000 |
1015+------------+
1016
1017
1018### 3. What did you see instead (Required)
1019````
1020mysql> select avg(value) from t group by id;
1021+---------------+
1022| avg(value) |
1023+---------------+
1024| 2.30000000000 |
1025| 6.70000000000 |
1026| 4.50000000000 |
1027| 3.30000000000 |
1028+---------------+
1029
1030mysql> set @@tidb_allow_mpp=1;
1031Query OK, 0 rows affected (0.00 sec)
1032
1033mysql> desc select avg(value) as av from t group by id having av>4;
1034+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
1035| id | estRows | task | access object | operator info |
1036+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
1037| Selection_7 | 3.60 | root | | gt(Column#4, 4) |
1038| └─TableReader_30 | 4.50 | root | | data:ExchangeSender_29 |
1039| └─ExchangeSender_29 | 4.50 | cop[tiflash] | | ExchangeType: PassThrough |
1040| └─Projection_25 | 4.50 | cop[tiflash] | | if(eq(Column#8, 0), <nil>, div(Column#4, cast(Column#8, decimal(20,0) BINARY)))->Column#4 |
1041| └─HashAgg_26 | 4.50 | cop[tiflash] | | group by:test.t.id, funcs:sum(Column#9)->Column#8, funcs:sum(Column#10)->Column#4 |
1042| └─ExchangeReceiver_28 | 4.50 | cop[tiflash] | | |
1043| └─ExchangeSender_27 | 4.50 | cop[tiflash] | | ExchangeType: HashPartition, Hash Cols: test.t.id |
1044| └─HashAgg_11 | 4.50 | cop[tiflash] | | group by:test.t.id, funcs:count(test.t.value)->Column#9, funcs:sum(test.t.value)->Column#10 |
1045| └─TableFullScan_24 | 9.00 | cop[tiflash] | table:t | keep order:false |
1046+--------------------------------------+---------+--------------+---------------+---------------------------------------------------------------------------------------------+
10479 rows in set (0.00 sec)
1048```
1049
1050### 4. What is your TiDB version? (Required)
1051master
1052<!-- Paste the output of SELECT tidb_version() -->
1053
1054",1,mpp the precision of avg decimal is wider than that from mysql bug report please answer these questions before submitting your issue thanks minimal reproduce step required create table test t id int value decimal alter table test t set tiflash replica insert into test t values insert into test t values null null null null what did you expect to see required mysql select avg value from t group by id avg value what did you see instead required mysql select avg value from t group by id avg value mysql set tidb allow mpp query ok rows affected sec mysql desc select avg value as av from t group by id having av id estrows task access object operator info selection root gt column └─tablereader root data exchangesender └─exchangesender cop exchangetype passthrough └─projection cop if eq column div column cast column decimal binary column └─hashagg cop group by test t id funcs sum column column funcs sum column column └─exchangereceiver cop └─exchangesender cop exchangetype hashpartition hash cols test t id └─hashagg cop group by test t id funcs count test t value column funcs sum test t value column └─tablefullscan cop table t keep order false rows in set sec what is your tidb version required master ,1105583941,15720755562.0,IssuesEvent,2021-03-29 01:06:08,jgeraigery/DDWatch,https://api.github.com/repos/jgeraigery/DDWatch,opened,CVE-2020-1935 (Medium) detected in tomcat-embed-core-9.0.16.jar,security vulnerability,"## CVE-2020-1935 - Medium Severity Vulnerability1056<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-9.0.16.jar</b></p></summary>1057 1058<p>Core Tomcat implementation</p>1059<p>Path to dependency file: DDWatch/pom.xml</p>1060<p>Path to vulnerable library: /tmp/ws-ua_20200428152211_JHBTJH/downloadResource_QIVTYB/20200428152545/tomcat-embed-core-9.0.16.jar</p>1061<p>1062 1063Dependency Hierarchy:1064 - spring-boot-starter-web-2.1.3.RELEASE.jar (Root Library)1065 - spring-boot-starter-tomcat-2.1.3.RELEASE.jar1066 - :x: **tomcat-embed-core-9.0.16.jar** (Vulnerable Library)1067</p>1068</details>1069<p></p>1070<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png' width=19 height=20> Vulnerability Details</summary>1071<p> 1072 1073In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.1074 1075<p>Publish Date: 2020-02-241076<p>URL: <a href=https://vuln.whitesourcesoftware.com/vulnerability/CVE-2020-1935>CVE-2020-1935</a></p>1077</p>1078</details>1079<p></p>1080<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS 3 Score Details (<b>4.8</b>)</summary>1081<p>1082 1083Base Score Metrics:1084- Exploitability Metrics:1085 - Attack Vector: Network1086 - Attack Complexity: High1087 - Privileges Required: None1088 - User Interaction: None1089 - Scope: Unchanged1090- Impact Metrics:1091 - Confidentiality Impact: Low1092 - Integrity Impact: Low1093 - Availability Impact: None1094</p>1095For more information on CVSS3 Scores, click <a href=""https://www.first.org/cvss/calculator/3.0"">here</a>.1096</p>1097</details>1098<p></p>1099<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/suggested_fix.png' width=19 height=20> Suggested Fix</summary>1100<p>1101 1102<p>Type: Upgrade version</p>1103<p>Origin: <a href=""https://github.com/advisories/GHSA-6v7p-v754-j89v"">https://github.com/advisories/GHSA-6v7p-v754-j89v</a></p>1104<p>Release Date: 2020-02-24</p>1105<p>Fix Resolution: org.apache.tomcat.embed:tomcat-embed-core:7.0.100,8.5.51,9.0.31;org.apache.tomcat:tomcat-coyote:7.0.100,8.5.51,9.0.31</p>1106 1107</p>1108</details>1109<p></p>1110 1111<!-- <REMEDIATE>{""isOpenPROnVulnerability"":true,""isPackageBased"":true,""isDefaultBranch"":true,""packages"":[{""packageType"":""Java"",""groupId"":""org.apache.tomcat.embed"",""packageName"":""tomcat-embed-core"",""packageVersion"":""9.0.16"",""packageFilePaths"":[""/pom.xml""],""isTransitiveDependency"":true,""dependencyTree"":""org.springframework.boot:spring-boot-starter-web:2.1.3.RELEASE;org.springframework.boot:spring-boot-starter-tomcat:2.1.3.RELEASE;org.apache.tomcat.embed:tomcat-embed-core:9.0.16"",""isMinimumFixVersionAvailable"":true,""minimumFixVersion"":""org.apache.tomcat.embed:tomcat-embed-core:7.0.100,8.5.51,9.0.31;org.apache.tomcat:tomcat-coyote:7.0.100,8.5.51,9.0.31""}],""baseBranches"":[],""vulnerabilityIdentifier"":""CVE-2020-1935"",""vulnerabilityDetails"":""In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely."",""vulnerabilityUrl"":""https://vuln.whitesourcesoftware.com/vulnerability/CVE-2020-1935"",""cvss3Severity"":""medium"",""cvss3Score"":""4.8"",""cvss3Metrics"":{""A"":""None"",""AC"":""High"",""PR"":""None"",""S"":""Unchanged"",""C"":""Low"",""UI"":""None"",""AV"":""Network"",""I"":""Low""},""extraData"":{}}</REMEDIATE> -->",True,"CVE-2020-1935 (Medium) detected in tomcat-embed-core-9.0.16.jar - ## CVE-2020-1935 - Medium Severity Vulnerability1112<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-9.0.16.jar</b></p></summary>1113 1114<p>Core Tomcat implementation</p>1115<p>Path to dependency file: DDWatch/pom.xml</p>1116<p>Path to vulnerable library: /tmp/ws-ua_20200428152211_JHBTJH/downloadResource_QIVTYB/20200428152545/tomcat-embed-core-9.0.16.jar</p>1117<p>1118 1119Dependency Hierarchy:1120 - spring-boot-starter-web-2.1.3.RELEASE.jar (Root Library)1121 - spring-boot-starter-tomcat-2.1.3.RELEASE.jar1122 - :x: **tomcat-embed-core-9.0.16.jar** (Vulnerable Library)1123</p>1124</details>1125<p></p>1126<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png' width=19 height=20> Vulnerability Details</summary>1127<p> 1128 1129In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.1130 1131<p>Publish Date: 2020-02-241132<p>URL: <a href=https://vuln.whitesourcesoftware.com/vulnerability/CVE-2020-1935>CVE-2020-1935</a></p>1133</p>1134</details>1135<p></p>1136<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS 3 Score Details (<b>4.8</b>)</summary>1137<p>1138 1139Base Score Metrics:1140- Exploitability Metrics:1141 - Attack Vector: Network1142 - Attack Complexity: High1143 - Privileges Required: None1144 - User Interaction: None1145 - Scope: Unchanged1146- Impact Metrics:1147 - Confidentiality Impact: Low1148 - Integrity Impact: Low1149 - Availability Impact: None1150</p>1151For more information on CVSS3 Scores, click <a href=""https://www.first.org/cvss/calculator/3.0"">here</a>.1152</p>1153</details>1154<p></p>1155<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/suggested_fix.png' width=19 height=20> Suggested Fix</summary>1156<p>1157 1158<p>Type: Upgrade version</p>1159<p>Origin: <a href=""https://github.com/advisories/GHSA-6v7p-v754-j89v"">https://github.com/advisories/GHSA-6v7p-v754-j89v</a></p>1160<p>Release Date: 2020-02-24</p>1161<p>Fix Resolution: org.apache.tomcat.embed:tomcat-embed-core:7.0.100,8.5.51,9.0.31;org.apache.tomcat:tomcat-coyote:7.0.100,8.5.51,9.0.31</p>1162 1163</p>1164</details>1165<p></p>1166 1167<!-- <REMEDIATE>{""isOpenPROnVulnerability"":true,""isPackageBased"":true,""isDefaultBranch"":true,""packages"":[{""packageType"":""Java"",""groupId"":""org.apache.tomcat.embed"",""packageName"":""tomcat-embed-core"",""packageVersion"":""9.0.16"",""packageFilePaths"":[""/pom.xml""],""isTransitiveDependency"":true,""dependencyTree"":""org.springframework.boot:spring-boot-starter-web:2.1.3.RELEASE;org.springframework.boot:spring-boot-starter-tomcat:2.1.3.RELEASE;org.apache.tomcat.embed:tomcat-embed-core:9.0.16"",""isMinimumFixVersionAvailable"":true,""minimumFixVersion"":""org.apache.tomcat.embed:tomcat-embed-core:7.0.100,8.5.51,9.0.31;org.apache.tomcat:tomcat-coyote:7.0.100,8.5.51,9.0.31""}],""baseBranches"":[],""vulnerabilityIdentifier"":""CVE-2020-1935"",""vulnerabilityDetails"":""In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely."",""vulnerabilityUrl"":""https://vuln.whitesourcesoftware.com/vulnerability/CVE-2020-1935"",""cvss3Severity"":""medium"",""cvss3Score"":""4.8"",""cvss3Metrics"":{""A"":""None"",""AC"":""High"",""PR"":""None"",""S"":""Unchanged"",""C"":""Low"",""UI"":""None"",""AV"":""Network"",""I"":""Low""},""extraData"":{}}</REMEDIATE> -->",0,cve medium detected in tomcat embed core jar cve medium severity vulnerability vulnerable library tomcat embed core jar core tomcat implementation path to dependency file ddwatch pom xml path to vulnerable library tmp ws ua jhbtjh downloadresource qivtyb tomcat embed core jar dependency hierarchy spring boot starter web release jar root library spring boot starter tomcat release jar x tomcat embed core jar vulnerable library vulnerability details in apache tomcat to to and to the http header parsing code used an approach to end of line parsing that allowed some invalid http headers to be parsed as valid this led to a possibility of http request smuggling if tomcat was located behind a reverse proxy that incorrectly handled the invalid transfer encoding header in a particular manner such a reverse proxy is considered unlikely publish date url a href cvss score details base score metrics exploitability metrics attack vector network attack complexity high privileges required none user interaction none scope unchanged impact metrics confidentiality impact low integrity impact low availability impact none for more information on scores click a href suggested fix type upgrade version origin a href release date fix resolution org apache tomcat embed tomcat embed core org apache tomcat tomcat coyote isopenpronvulnerability true ispackagebased true isdefaultbranch true packages istransitivedependency true dependencytree org springframework boot spring boot starter web release org springframework boot spring boot starter tomcat release org apache tomcat embed tomcat embed core isminimumfixversionavailable true minimumfixversion org apache tomcat embed tomcat embed core org apache tomcat tomcat coyote basebranches vulnerabilityidentifier cve vulnerabilitydetails in apache tomcat to to and to the http header parsing code used an approach to end of line parsing that allowed some invalid http headers to be parsed as valid this led to a possibility of http request smuggling if tomcat was located behind a reverse proxy that incorrectly handled the invalid transfer encoding header in a particular manner such a reverse proxy is considered unlikely vulnerabilityurl ,0116815138,19026934339.0,IssuesEvent,2021-11-24 05:35:51,pingcap/tidb,https://api.github.com/repos/pingcap/tidb,closed,`rand_seed` system variable does not support replication of the RAND() function,type/bug type/compatibility sig/sql-infra severity/moderate,"## Bug Report
1169In TiDB, rand_seed variables are ignored. The result should always respond 0.02887.
1170
1171### 1. Minimal reproduce step
1172Repeat this several times.
1173```sql
1174set @@rand_seed1=10000000,@@rand_seed2=1000000;
1175select ROUND(RAND(),5);
1176```
1177### 2. What did you expect to see?
1178In MySQL
1179```sql
1180mysql> set @@rand_seed1=10000000,@@rand_seed2=1000000;
1181Query OK, 0 rows affected (0.00 sec)
1182
1183mysql> select ROUND(RAND(),5);
1184+-----------------+
1185| ROUND(RAND(),5) |
1186+-----------------+
1187| 0.02887 |
1188+-----------------+
11891 row in set (0.00 sec)
1190
1191mysql> set @@rand_seed1=10000000,@@rand_seed2=1000000;
1192Query OK, 0 rows affected (0.00 sec)
1193
1194mysql> select ROUND(RAND(),5);
1195+-----------------+
1196| ROUND(RAND(),5) |
1197+-----------------+
1198| 0.02887 |
1199+-----------------+
12001 row in set (0.00 sec)