how to add a string which consist extra percentage sign
How to add percent sign to NSString
What is the meaning of this two letter code in the YouTube logo? I see a new logo with CA at youtube.com. Does anyone know what it means? How do HttpOnly cookies work with AJAX requests? JavaScript needs access to cookies if AJAX is used on a site with access restrictions based on cookies. Will HttpOnly cookies work on an AJAX site?   Edit: Microsoft created a way to prevent XSS attacks by disallowing JavaScript access to cookies if HttpOnly is specified. FireFox later adopted this. So my question is: If you are using AJAX on a site, like StackOverflow, are Http-Only cookies an option?  Edit 2: Question 2. If the purpose of HttpOnly is to prevent JavaScript access to cookies, and you can still retrieve the cookies via JavaScript through the XmlHttpRequest Object, what is the point of HttpOnly?  Edit 3: Here is a quote from Wikipedia:     When the browser receives such a cookie, it is supposed to use it as usual in the following HTTP exchanges, but not to make it visible to client-side scripts.[32] The HttpOnly flag is not part of any standard, and is not implemented in all browsers. Note that there is currently no prevention of reading or writing the session cookie via a XMLHTTPRequest. [33].   I understand that document.cookie is blocked when you use HttpOnly. But it seems that you can still read cookie values in the XMLHttpRequest object, allowing for XSS. How does HttpOnly make you any safer than? By making cookies essentially read only?   In your example, I cannot write to your document.cookie, but I can still steal your cookie and post it to my domain using the XMLHttpRequest object.  &lt;script type="text/javascript"&gt;     var req = null;     try { req = new XMLHttpRequest(); } catch(e) {}     if (!req) try { req = new ActiveXObject("Msxml2.XMLHTTP"); } catch(e) {}     if (!req) try { req = new ActiveXObject("Microsoft.XMLHTTP"); } catch(e) {}     req.open('GET', 'http://stackoverflow.com/', false);     req.send(null);     alert(req.getAllResponseHeaders()); &lt;/script&gt;   Edit 4: Sorry, I meant that you could send the XMLHttpRequest to the StackOverflow domain, and then save the result of getAllResponseHeaders() to a string, regex out the cookie, and then post that to an external domain. It appears that Wikipedia and ha.ckers concur with me on this one, but I would love be re-educated...  Final Edit: Ahh, apparently both sites are wrong, this is actually a . IE6 &amp; 7 are actually the only browsers that currently fully support HttpOnly.  To reiterate everything I've learned:   HttpOnly restricts all access to document.cookie in IE7 &amp; and FireFox (not sure about other browsers) HttpOnly removes cookie information from the response headers in XMLHttpObject.getAllResponseHeaders() in IE7. XMLHttpObjects may only be submitted to the domain they originated from, so there is no cross-domain posting of the cookies.   edit: This information is likely no longer up to date. Disabling middle mouse button I'm running macOS 10.15 Catalina Beta.  When I try to install Spotify I see the following error:    Is this a Spotify issue or a Catalina issue?  Thanks. Failed review audit - for me quite clearly off-topic, can it be removed from the audit set? Python mechanize javascript My HP Pavilion laptop has Ubuntu 18 version and I once tried to disable InBuilt webcam just for security reasons. But now it wasn't working and I reinstalled newer version of Ubuntu 20. But even after installing newer version the camera is still not working. When I open cheese it shows this screen. I assumed I might have deleted the drivers as I was doing package installation and removel that time. Please suggest me what should I do to get this working. Prove this inequality $\sum \cos{A}\ge\frac{1}{4}(3+\sum\cos{(A-B)})$ “Have you seen...” or “Did you see...?” In the US, when people work together, they may look for a colleague or any person to say something or for any other reason, asking colleagues or other people this type of question:         Have you seen Michael?   (OR)        Did you see Michael?          Which is considered right if the question refers to an activity (in our case "see") during the day and not in the past in general? I noticed that I can only perform certain actions such as commenting a finite number of times in a given period of time. Obviously, rate limiting is in place to prevent accidental misuse or intentional abuse of certain features.  Where else is rate limiting applied on Stack Exchange sites, and what are the limits? If you cast Polymorph on a non beast creature then cast Awaken on their beast form how much carries over after polymorph ends?  Polymorph does not give any explicit information on what happens to your statistics when the polymorph ends:     The transformation lasts for the duration, or [drops to 0 hp]. [...] The target's game statistics, including mental ability scores, are replaced by the statistics of the chosen beast.  (Basic Rules, pg. 266)   So this leaves ambiguity when game statistics are altered during polymorph,   The charm effect of Awaken seems pretty clear from the  and reinforced by the specific wording referring to the target as a beast or plant during effects and a creature afterwards:     The awakened beast or plant is charmed by you [longer than polymorph.] When the charmed condition ends, the awakened creature chooses [...] (Basic Rules, pg. 216)   The other two effects of awakening (other than making a plant mobile) are less clear-cut:     The target gains an Intelligence of 10. The target also gains the ability to speak one language you know.  (Basic Rules, pg. 216)   I would guess the modification to intelligence would apply to the beast's stats and therefore end with polymorph.     as being independent of creature statistics and act more as the character's experience. I'd argue the experience of a stranger turning you into a mouse, then gifting you the ability - as a mouse - to speak a language you have never used before would be an experience you couldn't lose I'm not sure if the language and intelligence granted from awakening should remain linked.    These are two examples I can see this having significant impact on my campaign:   Meet an NPC I don't share a language with, Polymorph them then Awaken their beast form so they can speak my language. Can I now communicate with them when they turn back?  If their original intelligence was higher then 10 is it reduced to 10? Say I use find familiar to get an owl (classified as a fey) familiar, then polymorph it to an owl (classified as a beast) so my druid friend can cast Awaken on it, does my familiar keep an intelligence of 10 and/or the ability to speak?   So after reverting from an awoken polymorphed state would you keep the 10 intelligence and a new language, only the new language, or not keep either? Currently, when someone suggests an edit, they are unable to keep track of it without watching reputation levels or constantly refreshing the page. What I would like is a notification, that shows up like the notification where someone has edited your question, that shows whether a suggested edit has been approved or rejected after the last vote is cast. This way, the community can be notified when their edit has been rejected/approved, while focusing their efforts on another question/answer. How to put Json inside asynctask - Android It didn't fixed the error. So, how do I fix my GUI update?  For every software I have to install it from command line because I got same error when install software from Ubuntu Software Center. I know it's not possible to install a 32-bit driver in the traditional way, but I really cannot find a 64-bit driver for my memory card reader. Is there anyway I can somehow use this device with a 32-bit driver on a 64-bit Windows 7 installation?  I was thinking there might be a way to run a device in compatibility mode? Possibly even have a 32-bit device layer emulator or something?  I'm interested in any method to get this device up and running. During graduate studies online application submission period, is there any preference given for an applicant if he/she submits his application at the beginning of that period compared with someone who submits his/her application couple of hours before the deadline?  Or as long as the applications are complete there is absolutely no difference! How do I run a command? I am a new user, who has just been told to run / execute a command. The answer has some text with a grey background like this text here or  sometimes this text here.   However, I don't know what "run" or "command" means in relation to Ubuntu.  How do I do this?    This is intended for use as a Q&amp;A you can link to when you tell someone to run a command. What is a “protected” or "highly active" question? Questions can be protected (i.e. marked "highly active").   What does it mean for a question to be protected? Why are some questions protected? Who can protect and unprotect questions? Who can answer a protected question? How are protected questions displayed? When should I protect or unprotect a question? When does the Community user protect a question? Filter to change the content of 404 page I have created custom rewrite rules. These rules now go to 404 page as expected. I can use action hook template_redirect to change the template matching query_var.  But I don't want to create separate template files as the page structure depend on the current theme in use. Rather I just want to change the content and title. I have tried change the content using the_content filter, but it seems the filter doesn't even get called for 404 page.  I also tried loading index.php template and then using the_content filter, but it also doesn't work.  Is there any way to achieve this? Do not load Facebook-based avatars directly from the Facebook CDN Users who register for their account via Facebook get  as their default avatar. However, the avatar is not copied to SE servers or Imgur, and thus the original URL is kept. This URL compromises the privacy of the user as it contains their Facebook user ID which everyone can easily extract and then view the profile.  The image is also not visible at all to those who have Facebook blocked for their own privacy (by extensions such as Ghostery or browser features ), or due to network policy (e.g. some work and school networks block Facebook).  With the new avatar system, it would be much better if the Facebook photo was stored like a manually uploaded avatar to avoid this problem.