2017-12-02 UTC
[kevinmarks], dougbeal|mb1 and tantek joined the channel
renem, KartikPrabhu, tantek, [miklb], j12t_, [jeremycherfas] and [kevinmarks] joined the channel
KartikPrabhu and gRegorLove joined the channel
John__ joined the channel
snarfed joined the channel
# 15:50 snarfed hey aaronpk, just checking, you're not parsing mf2 out of granary's atom content, are you?
# 15:52 snarfed probably not, since there's not much there...but if so, definitely ask it for mf2 explicitly instead, with format=mf2-json
aaronpk_ joined the channel
# 16:05 Zegnat Does anyone know if you can subscribe to a tag on a GitHub issue tracker?
snarfed joined the channel
# 16:26 snarfed definitely try the json mf2 first, it'll be a bit cleaner
# 16:26 aaronpk oh are you generating that separately rather than parsing the html?
# 16:26 snarfed yeah, the html is actually generated from the json
# 16:27 aaronpk ironically I don't have any code to consume the mf2 json directly, right now everything assumes it'll be parsing the HTML
# 16:27 aaronpk I mean it shouldn't be hard to bypass the parsing step to use the JSON directly, but kind of funny
# 16:28 aaronpk if i'm consuming this JSON directly, I have to have a lot more error checking since I can't be sure it conforms to the mf2 json structure
# 16:28 aaronpk whereas if I'm using the mf2 parser I know that the resulting JSON will always follow the structure output by the parser
# 16:32 aaronpk that p-location doesn't belong in "type" and that would never have been created by the mf2 parser
# 16:39 snarfed plus any big deviations btw granary's json and html are arguably all bugs
# 16:39 snarfed so go ahead w/html, and i'll look at the bugs you find
# 16:40 GWG snarfed: Writing up the Semantic Linkbacks changelog for the PR so pfefferle can go stable. You were very busy
# 16:40 snarfed GWG: huh i thought i captured all the facepile changes in the changelog
tantek, [kevinmarks], aaronpk and [miklb] joined the channel
# 18:59 GWG Does anyone have any thoughts on the possible dangers of parsing all URLs in a page looking for video/audio extensions?
[cleverdevil] and [miklb] joined the channel
# 20:02 jjuran GWG: If parsing a URL is considered dangerous, you have a serious problem.
# 20:36 aaronpk it was only on two pages, but embedded a list of github issues in the wiki page
KartikPrabhu joined the channel
# 20:51 Zegnat GWG, what does “parsing all URLs” mean? Run a regex looking for URLs? Parsing HTML?
# 20:51 GWG Yes. And I'm trying to think if there is a security issue for a user.
# 20:53 Zegnat There shouldn’t be any security issue from just looking for URLs. There can be security issues depending on parsing though. E.g. if you parse HTML with libxml (e.g. PHP’s DOMDocument) some XML bugs could have it crash.
KartikPrabhu joined the channel
# 20:55 Zegnat Automatically loading video files could theoretically have security issues, because the video lib on the user’s side may have issues. Libav I think has certain security problems in their video decoding. So you do not ever want to start video without letting the user decide.
sebsel joined the channel
# 22:57 GWG aaronpk: Why do you have two different locations on your check-in posts?
# 22:58 aaronpk one is the venue i'm checking in to, the other is where I am when I posted the checkin
# 23:00 GWG And how I do location in general.
# 23:01 GWG I have check-ins and location coming from two different pieces of code
# 23:02 aaronpk me too. the location property comes from my GPS database
# 23:07 GWG Well, in my case, it is different code looking at the same stuff. But being as the checkin is independent of the location and vice versa, I need to think about it.
# 23:10 Zegnat That’s why my location and checkin properties are set to the same h-card on my blog: I was at said venue when I checked into it.
[kevinmarks] joined the channel
# 23:30 [kevinmarks] Foursquare keeps the user's geopoint and the venue separately (that's part of how they get good at guessing locations)
# 23:36 aaronpk I cheated on venues by not having a venue database. venue data is stored in each post
KartikPrabhu and leg joined the channel
# 23:45 GWG I am not implementing till I have a place to store them.