---
title: '27 выпуск 07 сезона. React Apollo vs Redux + REST, Native Payment Request API, Scallop, TimeCalc, Bounds.js, Zip и прочее'
date: 2019-07-08
tags:
  - podcasts
audio_url: 'https://files.rwpod-assets.com/podcasts/07/0727.mp3'
audio_size: 39914236
duration: '00:33:14'
cover: '/images/covers/07/0727.webp'
---

Добрый день уважаемые слушатели. Представляем новый выпуск подкаста RWpod. В этом выпуске:

## Ruby

- [Ruby gem strong_password found to contain remote code execution code in a malicious version, further strengthening worries of growth in supply-chain attacks](https://snyk.io/blog/ruby-gem-strong_password-found-to-contain-remote-code-execution-code-in-a-malicious-version-further-strengthening-worries-of-growth-in-supply-chain-attacks/), [Rails 6 adds support for Multi Environment credentials](https://blog.bigbinary.com/2019/07/03/rails-6-adds-support-for-multi-environment-credentials.html) и [6 changes you might have missed coming in Ruby 2.7](https://sourcediving.com/less-known-changes-in-ruby-2-7-8d5db660370f)
- [I just made Ruby++](https://www.xuuso.com/programming/ruby/2019/07/01/i-just-made-ruby-plusplus.html), [Brewing our own Template Lexer in Ruby](https://blog.appsignal.com/2019/07/02/ruby-magic-brewing-our-own-template-lexer-in-ruby.html), [Scallop - ergonomic shell wrapper](https://github.com/fetlife/scallop) и [TimeCalc - next generation of Time arithmetic library](https://github.com/zverok/time_calc)

## Web

- [Snyk research team discovers severe prototype pollution security vulnerabilities affecting all versions of lodash](https://snyk.io/blog/snyk-research-team-discovers-severe-prototype-pollution-security-vulnerabilities-affecting-all-versions-of-lodash/), [How do JavaScript’s global variables really work?](https://2ality.com/2019/07/global-scope.html) и [Where Do You Learn HTML & CSS in 2019?](https://css-tricks.com/where-do-you-learn-html-css-in-2019/)
- [React Apollo vs Redux + REST: Implementing the same feature twice](https://medium.com/wix-engineering/react-apollo-vs-redux-rest-implementing-the-same-feature-twice-1b47e39d6d6a), [What Is the Native Payment Request API?](https://medium.com/better-programming/what-is-the-native-payments-request-api-905c60a996e8), [Bounds.js - asynchronous boundary detection, without dependencies](https://chriscavs.github.io/bounds-demo/) и [Zip - Robust ZIP decoder with defenses against dangerous compression ratios, spec deviations, malicious archive signatures, etc](https://github.com/ronomon/zip)
