Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion locale/ar/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: عن النود جي اس
trademark: العلامة التجارية
---

# عن الـ Node.js ®
# عن الـ Node.js ®
كونه بيئة تشغيل جافاسكريبت غير متزامنة و مدفوعة بالاحداث، فإن Node.js صمم لبناء تطبيقات للشبكات قابلة للتطوير. في المثال الأتي، يمكن التحكم في عدة اتصالات معا في وقت واحد و مع كل اتصال يتم تشغيل دالة مستدعاة، وعندما لن يكون هناك عمل لاتمامه، سيقف النود جي اس عن العمل مؤقتا.

```javascript
Expand Down
2 changes: 1 addition & 1 deletion locale/ar/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: الشعارات والرسومات

## تحميل الشعار

للحصول على معلومات حول الاستخدام المسموح به لشعارات وعلامات Node.js® يرجى مراجعة [سياسة العلامات التجارية](/ar/about/trademark/).
للحصول على معلومات حول الاستخدام المسموح به لشعارات وعلامات Node.js® يرجى مراجعة [سياسة العلامات التجارية](/ar/about/trademark/).

الإرشادات من أجل العرض المرئي لعلامة Node.js موضحة في [القواعد العرض الإرشادية](/static/documents/foundation-visual-guidelines.pdf).

Expand Down
2 changes: 1 addition & 1 deletion locale/ar/get-involved/node-meetups.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ layout: contribute.hbs
الصيغة
- [اللقاء](https://www.meetup.com/pdxnode/)
- تردد اللقاء
- كيف يتم تقديم طلب المحاضرة? <<اذكر هنا>>
- كيف يتم تقديم طلب المحاضرة? «اذكر هنا»
- إسم المنظم أو المنظمين (إذا اردت الإدلاء به)
- معلومات الإتصال بالمنظمين (إذا اردت الإدلاء به)

Expand Down
2 changes: 1 addition & 1 deletion locale/ca/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Sobre nosaltres
trademark: Trademark
---

# Sobre Node.js®
# Sobre Node.js®

Nascut com a un entorn d'execució de JavaScript orientat a esdeveniments asíncrons, Node.js està
dissenyat per a crear aplicacions en xarxa de manera escalable. En la següent aplicació d'exemple
Expand Down
2 changes: 1 addition & 1 deletion locale/de/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Über Node.js
trademark: Trademark
---

# Über Node.js®
# Über Node.js®

Als asynchrone, Event-basierte Laufzeitumgebung wurde Node speziell für die
Entwicklung von skalierbaren Netzwerkanwendungen entworfen. Im nachfolgenden
Expand Down
2 changes: 1 addition & 1 deletion locale/en/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: About
trademark: Trademark
---

# About Node.js®
# About Node.js®

As an asynchronous event-driven JavaScript runtime, Node.js is designed to build
scalable network applications. In the following "hello world" example, many
Expand Down
2 changes: 1 addition & 1 deletion locale/en/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: Logos and Graphics

## Logo Downloads

Please review the [trademark policy](/en/about/trademark/) for information about permissible use of Node.js® logos and marks.
Please review the [trademark policy](/en/about/trademark/) for information about permissible use of Node.js® logos and marks.

Guidelines for the visual display of the Node.js mark are described in
the [Visual Guidelines](/static/documents/foundation-visual-guidelines.pdf).
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@ layout: blog-post.hbs

## Details

A few weeks ago, Matthew Daley found a security vulnerability in Node's HTTP implementation, and thankfully did the responsible thing and reported it to us via email. He explained it quite well, so I'll quote him here:
A few weeks ago, Matthew Daley found a security vulnerability in Node's HTTP implementation, and thankfully did the responsible thing and reported it to us via email. He explained it quite well, so I'll quote him here:

> There is a vulnerability in node's `http_parser` binding which allows information disclosure to a remote attacker:
> There is a vulnerability in node's `http_parser` binding which allows information disclosure to a remote attacker:
>
> In node::StringPtr::Update, an attempt is made at an optimization on certain inputs (`node_http_parser.cc`, line 151). The intent is that if the current string pointer plus the current string size is equal to the incoming string pointer, the current string size is just increased to match, as the incoming string lies just beyond the current string pointer. However, the check to see whether or not this can be done is incorrect; "size" is used whereas "size_" should be used. Therefore, an attacker can call Update with a string of certain length and cause the current string to have other data appended to it. In the case of HTTP being parsed out of incoming socket data, this can be incoming data from other sockets.
> In node::StringPtr::Update, an attempt is made at an optimization on certain inputs (`node_http_parser.cc`, line 151). The intent is that if the current string pointer plus the current string size is equal to the incoming string pointer, the current string size is just increased to match, as the incoming string lies just beyond the current string pointer. However, the check to see whether or not this can be done is incorrect; "size" is used whereas "size_" should be used. Therefore, an attacker can call Update with a string of certain length and cause the current string to have other data appended to it. In the case of HTTP being parsed out of incoming socket data, this can be incoming data from other sockets.
>
> Normally node::StringPtr::Save, which is called after each execution of `http_parser`, would stop this from being exploitable as it converts strings to non-optimizable heap-based strings. However, this is not done to 0-length strings. An attacker can therefore exploit the mistake by making Update set a 0-length string, and then Update past its boundary, so long as it is done in one `http_parser` execution. This can be done with an HTTP header with empty value, followed by a continuation with a value of certain length.
>
Expand All @@ -46,6 +46,6 @@ The fix landed on [7b3fb22](https://github.com/joyent/node/commit/7b3fb22) and [

The first releases with the fix are v0.7.8 and 0.6.17. So now is a good time to make a big deal about it.

If you are using node version 0.6 in production, please upgrade to at least [v0.6.17](http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/), or at least apply the fix in [c9a231d](https://github.com/joyent/node/commit/c9a231d) to your system. (Version 0.6.17 also fixes some other important bugs, and is without doubt the most stable release of Node 0.6 to date, so it's a good idea to upgrade anyway.)
If you are using node version 0.6 in production, please upgrade to at least [v0.6.17](http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/), or at least apply the fix in [c9a231d](https://github.com/joyent/node/commit/c9a231d) to your system. (Version 0.6.17 also fixes some other important bugs, and is without doubt the most stable release of Node 0.6 to date, so it's a good idea to upgrade anyway.)

I'm extremely grateful that Matthew took the time to report the problem to us with such an elegant explanation, and in such a way that we had a reasonable amount of time to fix the issue before making it public.
I'm extremely grateful that Matthew took the time to report the problem to us with such an elegant explanation, and in such a way that we had a reasonable amount of time to fix the issue before making it public.
2 changes: 1 addition & 1 deletion locale/en/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Previous Releases
modules: "<code>NODE_MODULE_VERSION</code> refers to the ABI (application binary interface) version number of Node.js, used to determine which versions of Node.js compiled C++ add-on binaries can be loaded in to without needing to be re-compiled. It used to be stored as hex value in earlier versions, but is now represented as an integer."
---

### io.js &amp; Node.js
### io.js & Node.js
Releases 1.x through 3.x were called "io.js" as they were part of the io.js fork. As of Node.js 4.0.0 the former release lines of io.js converged with Node.js 0.12.x into unified Node.js releases.

<div class="highlight-box">
Expand Down
2 changes: 1 addition & 1 deletion locale/en/get-involved/node-meetups.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ If any meetup does not have a CoC and/or is reported as an unsafe place, it will
FORMAT
- [Meetup](https://www.meetup.com/pdxnode/)
- Frequency of meetups
- How to submit a talk? &lt;&lt;list here&gt;&gt;
- How to submit a talk? «list here»
- Organizer names (if you wish to provide)
- Organizers contact info (if you wish to provide)

Expand Down
2 changes: 1 addition & 1 deletion locale/es/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Acerca
trademark: Trademark
---

# Acerca de Node.js&reg;
# Acerca de Node.js®

Concebido como un entorno de ejecución de JavaScript orientado a eventos asíncronos, Node.js está diseñado
para construir aplicaciones en red escalables. En la siguiente aplicación de ejemplo "hola mundo", se pueden
Expand Down
2 changes: 1 addition & 1 deletion locale/es/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: Logos y Gráficos

## Descargas de Logo

Por favor revise la [Política de Marca Registrada](/es/about/trademark/) para obtener información sobre el uso permitido de Node.js&reg; logos y marcas.
Por favor revise la [Política de Marca Registrada](/es/about/trademark/) para obtener información sobre el uso permitido de Node.js® logos y marcas.

Las pautas para la visualización de la marca Node.js se describen en
las [Pautas Visuales](/static/documents/foundation-visual-guidelines.pdf).
Expand Down
2 changes: 1 addition & 1 deletion locale/es/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Versiones Anteriores
modules: "<code>NODE_MODULE_VERSION</code> se refiere al número de versión ABI (application binary interface) de Node.js, usado para determinar que versiones de los binarios de los complementos en C++ pueden ser cargados sin necesidad de ser re-compilados. Este solía ser almacenado como un valor hexadecimal en versiones anteriores, pero ahora es representado como un entero."
---

### io.js &amp; Node.js
### io.js & Node.js
Las versiones desde la 1.x hasta la 3.x fueron llamadas "io.js" ya que fueron parte del _fork_ io.js . Desde Node.js 4.0.0 las líneas de versiones de io.js convergieron con las de Node.js 0.12.x en una unificación de versiones de Node.js.

<div class="highlight-box">
Expand Down
2 changes: 1 addition & 1 deletion locale/fa/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: درباره
trademark: نشان تجاری
---

# درباره Node.js&reg;
# درباره Node.js®

به عنوان یک اجرا کننده رویدادهای ناهماهنگ در جاوا اسکریپت، Node.js به شکلی طراحی شده است که بتوان با آن برنامه‌های تحت وب توسعه پذیر ساخت. در مثال "hello world" پایین، تعداد خیلی زیادی اتصال به صورت هم زمان انجام گیرد.
پس از هر اتصال یه فراخوان (callback) اجرا خواهد شد، اما اگر کاری برای انجام نباشد نود می‌خوابد.
Expand Down
2 changes: 1 addition & 1 deletion locale/fr/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: A propos
trademark: Trademark
---

# A propos de Node.js&reg;
# A propos de Node.js®

En tant qu'environnement d'exécution JavaScript asynchrone et orienté événnement, Node.js est conçu
pour générer des applications scalables. Dans le "hello world" d'exemple
Expand Down
2 changes: 1 addition & 1 deletion locale/it/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: A propos
trademark: Trademark
---

# Informazioni su Node.js&reg;
# Informazioni su Node.js®

Come runtime JavaScript guidato da eventi asincroni, Node.js è progettato per
creare applicazioni di rete scalabili. Nel seguente esempio "Hello World",
Expand Down
2 changes: 1 addition & 1 deletion locale/it/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: Logos and Graphics
## Logo Downloads

Si prega di leggere il [trademark policy](/en/about/trademark/) per informazioni su come utilizzare i loghi
e il marchio Node.js&reg; loghi e marchi.
e il marchio Node.js® loghi e marchi.

Le linee guida visive sono descritte nelle
[Visual Guidelines](/static/documents/foundation-visual-guidelines.pdf).
Expand Down
2 changes: 1 addition & 1 deletion locale/ja/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Node.js とは
trademark: Trademark
---

# <!-- About Node.js&reg; -->Node.js&reg; とは
# <!--about-node-js-->Node.js® とは

<!--
As an asynchronous event driven JavaScript runtime, Node is designed to build
Expand Down
2 changes: 1 addition & 1 deletion locale/ja/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: リリース一覧
modules: "<code>NODE_MODULE_VERSION</code>は、Node.jsのABI(アプリケーションバイナリインタフェース)のバージョン番号を指します。このバージョンは、再コンパイルすることなくC++アドオンのバイナリーをロード可能か確認するために使われます。"
---

### io.js &amp; Node.js
### io.js & Node.js
<!-- Releases 1.x through 3.x were called "io.js" as they were part of the io.js fork. As of Node.js 4.0.0 the former release lines of io.js converged with Node.js 0.12.x into unified Node.js releases. -->
1.x から 3.x は、io.js のフォークにより、「io.js」と呼ばれていました。
Node.js 0.12.x と iojsの旧リリースラインは、Node.js 4.0.0 からリリースが統一されました。
Expand Down
2 changes: 1 addition & 1 deletion locale/ko/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: About
trademark: 트레이드마크
---

# Node.js&reg;에 대해서
# Node.js®에 대해서

<!--
As an asynchronous event driven JavaScript runtime, Node is designed to build
Expand Down
4 changes: 2 additions & 2 deletions locale/ko/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: 로고와 그래픽

## Logo Downloads

Please review the [trademark policy](/en/about/trademark/) for information about permissible use of Node.js&reg; logos and marks.
Please review the [trademark policy](/en/about/trademark/) for information about permissible use of Node.js® logos and marks.

Guidelines for the visual display of the Node.js mark are described in
the [Visual Guidelines](/static/documents/foundation-visual-guidelines.pdf).
Expand All @@ -18,7 +18,7 @@ the [Visual Guidelines](/static/documents/foundation-visual-guidelines.pdf).

## 로고 다운로드

Node.js&reg; 로고와 마크를 사용할 수 있는 경우에 대한 정보는 [상표 정책](/ko/about/trademark/)을
Node.js® 로고와 마크를 사용할 수 있는 경우에 대한 정보는 [상표 정책](/ko/about/trademark/)을
확인해보기 바랍니다.

Node.js의 시각적인 가이드라인은
Expand Down
2 changes: 1 addition & 1 deletion locale/ko/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ modules: "<code>NODE_MODULE_VERSION</code>은 Node.js의 ABI(application binary
---

<!--
### io.js &amp; Node.js
### io.js & Node.js
Releases 1.x through 3.x were called "io.js" as they were part of the io.js fork. As of Node.js 4.0.0 the former release lines of io.js converged with Node.js 0.12.x into unified Node.js releases.
-->
### io.js와 Node.js
Expand Down
2 changes: 1 addition & 1 deletion locale/pt-br/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Sobre
trademark: Trademark
---

# Sobre Node.js&reg;
# Sobre Node.js®
<!--
As an asynchronous event driven JavaScript runtime, Node is designed to build
scalable network applications. In the following "hello world" example, many
Expand Down
2 changes: 1 addition & 1 deletion locale/pt-br/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Versões Anteriores
modules: "<code>NODE_MODULE_VERSION</code> Se refere ao número de versão de ABI (application binary interface) do Node.js, usado para determinar quais versões do Node.js que compilam binários de complemento do C++ que podem ser carregados sem precisarem ser re-compilados. Ele costumava ser armazenado como um valor hexadecimal em versões anteriores, mas agora é representado como um inteiro."
---

### io.js &amp; Node.js
### io.js & Node.js
As versões 1.x até 3.x foram chamadas de "io.js", pois faziam parte do fork do io.js. A partir do Node.js 4.0.0 as antigas linhas de lançamento do io.js convergiram com o Node.js 0.12.x para as versões unificadas do Node.js.

<div class="highlight-box">
Expand Down
2 changes: 1 addition & 1 deletion locale/ru/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: О проекте
trademark: Торговая марка
---

# О Node.js&reg;
# О Node.js®

Как асинхронное событийное JavaScript-окружение, Node.js спроектирован для построения
масштабируемых сетевых приложений. Ниже приведен пример "hello world", который
Expand Down
2 changes: 1 addition & 1 deletion locale/ru/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ title: Лого и графика
## Загрузка лого

Пожалуйста ознакомтесь с [политикой товарных знаков](/ru/about/trademark/) для получения
информации о разрешениях на использование логотипов и знаков Node.js&reg;.
информации о разрешениях на использование логотипов и знаков Node.js®.

Рекомендации по визуальному отображению метки Node.js описаны в разделе [Визуальные рекомендации](/static/documents/foundation-visual-guidelines.pdf).

Expand Down
2 changes: 1 addition & 1 deletion locale/ru/download/releases.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Предыдущие версии
modules: "<code>NODE_MODULE_VERSION</code> относится к номеру версии Node.js ABI (двоичный интерфейс приложения), который используется для определения того, в какие версии скомпилированных двоичных файлов C++ Node.js можно загружать файлы без необходимости перекомпиляции. Раньше он хранился как шестнадцатеричное значение в более ранних версиях, но теперь представляется как целое число."
---

### io.js &amp; Node.js
### io.js & Node.js
Релизы от 1.x до 3.x выходили под именем "io.js", так как они были частью форка io.js. Начиная с Node.js 4.0.0, предыдущие версии io.js перешли с Node.js 0.12.x в унифицированные версии Node.js.

<div class="highlight-box">
Expand Down
2 changes: 1 addition & 1 deletion locale/ru/get-involved/node-meetups.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ layout: contribute.hbs
ФОРМАТ
- [Встреча](https://www.Встреча.com/pdxnode/)
- Частота встреч
- Как стать докладчиком? ― &lt;&lt;список здесь&gt;&gt;
- Как стать докладчиком? ― «здесь»
- Имена организаторов (если вы хотите предоставить)
- Контактная информация организаторов (если вы хотите предоставить)

Expand Down
2 changes: 1 addition & 1 deletion locale/ru/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ labels:
version-schedule-prompt-link-text: график LTS.
---

Node.js&reg; — это JavaScript-окружение построенное на движке [Chrome V8](https://v8.dev/).
Node.js® — это JavaScript-окружение построенное на движке [Chrome V8](https://v8.dev/).
2 changes: 1 addition & 1 deletion locale/uk/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Про проект
trademark: Торгова марка
---

# Про Node.js&reg;
# Про Node.js®

Як асинхронне подієве JavaScript–оточення, Node.js спроектований для побудови
масштабованих мережевих додатків. У нижче наведений приклад "hello world", який
Expand Down
2 changes: 1 addition & 1 deletion locale/uk/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: Лого та графіка

## Завантаження лого

Будь ласка, прочитайте [політику товарного знаку](/en/about/trademark/) щодо дозволеного використання логотипів та позначень Node.js&reg;.
Будь ласка, прочитайте [політику товарного знаку](/en/about/trademark/) щодо дозволеного використання логотипів та позначень Node.js®.

Правила візуального оформлення позначень Node.js описані у
[Visual Guidelines](/static/documents/foundation-visual-guidelines.pdf).
Expand Down
2 changes: 1 addition & 1 deletion locale/zh-cn/about/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: 关于
trademark: Trademark
---

# 关于 Node.js&reg;
# 关于 Node.js®

作为异步驱动的 JavaScript 运行时,Node.js 被设计成可升级的网络应用。在下面的“Hello World”示例中,许多连接可以并行处理。每一个连接都会触发一个回调,但是如果没有可做的事情,Node.js 就进入睡眠状态。

Expand Down
2 changes: 1 addition & 1 deletion locale/zh-cn/about/resources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ title: 商标和图像

## 商标下载

请查看相关 [商标政策](/zh-cn/about/trademark/) 以便了解许可范围内的 Node.js&reg;;商标以及标记等。
请查看相关 [商标政策](/zh-cn/about/trademark/) 以便了解许可范围内的 Node.js®;商标以及标记等。

对于 Node.js 标志的可视化展示指南也在 [可视化指南](/static/documents/foundation-visual-guidelines.pdf) 有所描述。

Expand Down