414 reputation
39
bio website marcelogibson.com
location Belo Horizonte, Brazil
age 32
visits member for 2 years, 9 months
seen Oct 8 at 7:59

Work mostly with Python and JavaScript, but have some background in a wide range of languages and programming paradigms. Dream of designing my own language someday... Also interested in game design (as hobbyist), and always looking for new ways technology can help mankind achive a state of peace and prosperity, for everyone.

My company: Diferencial Consultores Associados


Mar
21
awarded  Yearling
Feb
7
awarded  Custodian
Feb
7
reviewed Needs Improvement Better php framework for shared hosting
Jan
14
asked Handling table name collisions in Django
Jan
6
awarded  Yearling
Jul
21
accepted Keeping “historical” migrations in Django-south
Jul
21
comment Parameterized Django models
Thanks, that really makes more sense. Afterall, if I'm creating a reusable component, it might well be possible I want to use it more than once in the same project, so if I made the customizations at the base classes that would limit what I can do to them afterwards. However, I think it's better to keep the base models concrete, since the whole point is having a framework of related models, and I can't set foreign keys to an abstract model.
Jul
21
accepted Parameterized Django models
Jul
17
asked Keeping “historical” migrations in Django-south
May
31
awarded  Tumbleweed
May
24
asked Parameterized Django models
May
24
revised Python flavor of regular expressions - related to which?
added 36 characters in body
May
24
answered Python flavor of regular expressions - related to which?
May
22
comment Means for (legit) cross-site scripting
Accepted, since it's in fact the right answer to how perform cross-domain requests. But for anyone interested in the security implications of it, see also this question at security.SE. In short, JSONP can be made safer by using a dedicated iframe for it, but sandboxed to allow scripting but deny top level navigation and same origin benefits.
May
22
accepted Means for (legit) cross-site scripting
May
18
awarded  Commentator
May
18
comment Means for (legit) cross-site scripting
@DanDiplo (and Tom Squires) thanks for the JSONP suggestion. Unfortunatly, that was not what I meant with my question (see the update). I'm not a native English speaker, and may have given a bad title to it... ("cross-site scripting" refer only to http requests?)
May
18
comment Means for (legit) cross-site scripting
@FlorianMargaine I didn't know that, thanks! What about the converse, can the parent page access the iframe's contents? (DOM, js environment) Or is the relation between them the same as, say, two tabs on the same browser? (in which case I'd have to use something like postMessage to make the communication work)
May
18
revised Means for (legit) cross-site scripting
added 700 characters in body
May
18
asked Means for (legit) cross-site scripting