#dev 2019-05-08

2019-05-08 UTC
pd09041999 and [tantek] joined the channel
[xavierroy], KartikPrabhu, DenSchub, pd09041999, snarfed and [chrisaldrich] joined the channel
#
Zegnat
sknebel, after you mentioned it I looked it up, and seems to me that libcurl should be exposing its URL parser: https://daniel.haxx.se/blog/2018/09/09/libcurl-gets-a-url-api/
#
Zegnat
Sadly it doesn’t look like those APIs are available from PHP, nor do they have CLI options for it..?
#
Zegnat
Just need to learn enough C to expose those functions to PHP and then I can implement a protection against the SSRF issue :P
#
aaronpk
I like this optimistic view of survey results: "more than 40% of the users said they’d use an URL API in libcurl if it had one"
#
aaronpk
because it also means that almost 60% of people wouldn't use it or don't care
#
aaronpk
Zegnat: have you checked for a php bug that's tracking that feature? If it doesn't exist yet you should file one!
#
Zegnat
It would also not surprise me if people didn't know what SSRF means or that using a different URL parsers than the one from your http lib is potentially dangerous.
#
Zegnat
I'll look to see if there is a PHP bug tracking it when I get to my desk. Good idea!
#
Zegnat
Though they may not be interested in opening up to an experimental API
[pfefferle], [Rose], djmoch and [Serena] joined the channel
#
@jvelo
↩️ FOAF, WebSub, Webmention, Micropub etc. all of those are at best building blocks for products to be. Accessibility and social inclusion (and thus great network effects) can only be achieved through great products, not through standards.
(twitter.com/_/status/1126014435208957952)
#
sebsel
Good morning :)
#
sebsel
is happy to read that the indieauth token tool is still in use
#
sebsel
I agree that it isn't the most user friendly yet. That's why I also chose not to style it with any css.
#
sebsel
Most of it is indeed security features that look like bad UX features
#
sebsel
Maybe I can add more commentary to it, even with links to the public XRay?
#
sebsel
XRay knows how to get the right rel-attributes, right? Then I can just say: "pick the authorization_endpoint from XRay" or something
#
sebsel
I made a repo and an issue out of it https://github.com/sebsel/gimme-a-token/issues/1
#
Loqi
[sebsel] #1 Add links to XRay for easier endpoint discovery
gxt joined the channel
#
Zegnat
sebsel: if you are not opposed to hosting dynamic code for it, you can run your own straight forward rel parser and already pick the right ones for people
[frank], [Rose], [Yulia], [stefp], pd09041999 and [xavierroy] joined the channel
#
GWG
Morning
#
Loqi
happy day
[kevinmarks786], [Yulia], [jgmac1106], pd09041999 and [Rose] joined the channel
#
GWG
Reading about viewports on SVG to see if I can prevent an SVG from being gigantic if not styled.
#
[Rose]
For the time being I just told it to always be max height and width 1rem, which works fine for me.
[xavierroy] joined the channel
#
Zegnat
What is Fatwigoo?
#
Loqi
Fatwigoo is an embedded SVG image that depends on (external) CSS for its width https://indieweb.org/Fatwigoo
#
Zegnat
If you run into specific SVG sizing issues, try capturing them there?
#
GWG
Zegnat: It doesn't say how to address it
#
Zegnat
True, I documented only the problem. My addressing it has previously been to tell people about the problem and hope they will go and fix it
#
Zegnat
Usually the fix is adding width and height parameters to the tag
#
Zegnat
(Note that width and height parameters can be overwritten by your own CSS anyway, so treat them as fallbacks)
#
GWG
[Rose]: I just embedded the 1rem into the SVG itself.
[frank] and [tantek] joined the channel
#
Zegnat
Filed a PHP curl bug for the URL parser, in case anyone is interested in that SSRF protection talk we had the other day: https://bugs.php.net/bug.php?id=77991 /cc aaronpk sknebel
#
[Rose]
Excellent, thanks GWG++ !
[xavierroy], [eddie] and [pfefferle] joined the channel
#
aaronpk
Zegnat++ nice
#
Loqi
Zegnat has 44 karma in this channel over the last year (146 in all channels)
pd09041999, swentel, [calumryan], eli_oat, snarfed, [eddie], [frank], [xavierroy], [kimberlyhirsh], [schmarty], [pfefferle] and dougbeal|iOS joined the channel
#
[eddie]
[Rose] You're using Aperture?
#
[eddie]
(for readers, this discussion was moved from indieweb)
#
[Rose]
Yes, self hosted aperture
#
[eddie]
hmm odd, same as me
#
[Rose]
Just signed out and back in again
#
[Rose]
Ok, now it seems to sync, the question is why wasn't it syncing before?
#
[eddie]
Hmm that's very strange. The syncing shouldn't change based on the filter
#
[eddie]
The sync pulls in the channels with unread counts and stores it in CoreData
#
[Rose]
I think syncing may have been failing for another reason, but I don't know what reason that might have been.
#
[eddie]
changed tokens anytime recently?
#
[eddie]
I wonder if it ended up with an invalid token
#
[Rose]
Maybe, but I would have expected an error message if it had an invalid token
#
[eddie]
ehhhhhh You would think so
#
[eddie]
but......
#
[eddie]
I don't think it would have lol
#
[eddie]
but it should have
#
[Rose]
Ah, then please consider this me filing a bug 😛
#
[eddie]
One issue is I need to add a "global alert" UI
#
[eddie]
:thumbsup: definitely
#
[Rose]
Makes sense.
#
[eddie]
I have a library I'm planning on using for that use case for errors like this when doing ... improvements
#
[Rose]
Now, can I tap on an image to view it in a larger format?
#
[eddie]
Ah, that you can not do. But I definitely want to add
#
[Rose]
Should I file an issue?
#
[eddie]
hmm I might have an issue for that one actually
#
Loqi
[EdwardHinkle] #60 In the reader when you click on an image, it should go to a full screen view
#
[Rose]
Just :thumbsup:ed it.
#
[eddie]
perfect 🙂
snarfed, jackjamieson, [Chris_Adams], [Rose], [schmarty], [eddie], [jgmac1106], leg, [kim_landwehr], [jemostrom], gxt, [kimberlyhirsh], pd09041999, [tantek], [chrisaldrich], [frank] and wagle joined the channel
#
aaronpk
Does anyone remember the issue with cloudfront or S3 and gzip responses? I remember there being some issue and can't remember the fix
ben_thatmustbeme joined the channel
#
Loqi
[leecalvink] I have Cloudfront set up but with auto-compression off, meaning it simply returns files from an S3 bucket which is all gzipped with this metadata attached (Content-Encoding: gzip, Content-Type: text/html; charset=UTF-8). I'm not sure exactly what...
KartikPrabhu and eli_oat joined the channel
#
Loqi
[Zegnat] #208 Support compression in fetch()
#
aaronpk
Ahh thanks
gRegorLove and [eddie] joined the channel
#
[eddie]
ohhhh so cool!!
[Rose] joined the channel
[tantek] joined the channel
#
[tantek]
!tell snarfed thanks again for the twitter profile image hack heads-up, all fixed on my site (just dropped them), yet also discovered I needed a replacement for the micro.blog icon
#
Loqi
Ok, I'll tell them that when I see them next
KartikPrabhu joined the channel
#
snarfed
[tantek]++ great! i assume you mean just the homepage icons, not the post icons (like reply etc)
#
Loqi
[tantek] has 22 karma in this channel over the last year (118 in all channels)
#
Loqi
snarfed: [tantek] left you a message 11 minutes ago: thanks again for the twitter profile image hack heads-up, all fixed on my site (just dropped them), yet also discovered I needed a replacement for the micro.blog icon
[anomalily] joined the channel
#
[tantek]
now onto the post icons 😂
#
[tantek]
!tell manton I found the SVG mini icon for micro.blog here https://help.micro.blog/2017/mac-version/, and copy/pasted the inline SVG to use on my home page for linking to my micro.blog profile. Hoping that bit of view source, copy, paste is ok! 😂
#
Loqi
Ok, I'll tell them that when I see them next
#
[tantek]
yes, that preview icon lol
[calumryan] joined the channel
#
[tantek]
!tell snarfed now the post icons (like repost reply) have all been replaced with emoji equivalents
#
Loqi
Ok, I'll tell them that when I see them next
#
snarfed
heh indeed they have
#
[tantek]
I think that's it for the "broken" things on my site
#
[tantek]
(as opposed to merely things could be layout tweaked, resized etc. to look nicer)
#
gRegorLove
Whoa, love the emoji URL animations!
#
snarfed
maintenance++
#
Loqi
maintenance has 1 karma over the last year
#
[tantek]
pretty sure I don't have any emoji URL animations
#
gRegorLove
...yet :)
[jgmac1106] joined the channel