#dev 2019-07-06

2019-07-06 UTC
valuemachine joined the channel
#
jacky what are some techniques people have for sanitizing reply content on their site?
#
Loqi It looks like we don't have a page for "some techniques people have for sanitizing reply content on their site" yet. Would you like to create it? (Or just say "some techniques people have for sanitizing reply content on their site is ____", a sentence describing the term)
#
jacky figured that
#
aaronpk i allow a very limited subset of HTML: https://github.com/aaronpk/XRay/blob/master/lib/XRay/Formats/Format.php#L37
KartikPrabhu joined the channel
#
[tantek] What is sanitize
#
Loqi sanitize, specifically "sanitizing HTML", "sanitizing for (display inside) HTML", or "sanitization" is a common operation performed by any site which displays content from external sources, including user entry https://indieweb.org/sanitize
#
jacky interesting
[zach] joined the channel
#
[zach] [cleverdevil] are you still working on puny or was that a one off project?
[cleverdevil] joined the channel
#
[cleverdevil] [zach] it was a bit of an exploration of what’s possible. I’d like to get back to it at some point potentially, but I’m sticking with Known for now.
[miklb] joined the channel
#
[miklb] anyone around by chance that uses Gulp/node? I’m trying to run a task against a file icons_base and want to save it as icons and not finding the right `pipe(gulp.dest()` path
#
[miklb] maybe need to use gulp-rename
#
[miklb] that worked
[Jeannie] joined the channel
#
[miklb] also, howdy! Sounds like IWC was a success
#
[tantek] framework << https://twitter.com/mikeriethmuller/status/1147042962997563393
#
Loqi ok, I added "https://twitter.com/mikeriethmuller/status/1147042962997563393" to the "See Also" section of /framework https://indieweb.org/wiki/index.php?diff=63382&oldid=55117
[jackjamieson] joined the channel
#
@a_know 3件のコメント https://b.hatena.ne.jp/entry/s/www.w3.org/TR/webmention/ “Webmention” https://htn.to/2cGsPsPVMi (twitter.com/_/status/1147316054789513216)
strugee joined the channel
#
@amagitakayosi “Webmention” https://htn.to/x7etYnRXvY (twitter.com/_/status/1147319431233540097)
[jgmac1106], valuemachine, gRegorLove, jjuran and [Michael_Beckwit joined the channel
#
@schmarty ↩️ It's a messy custom stack built on Hugo for content storage and templating, PHP for Micropub/Webmention/external content like link previews. (twitter.com/_/status/1147363370930253826)
[KevinMarks] joined the channel
#
[KevinMarks] good notes on sanitization here: https://pythonhosted.org/feedparser/html-sanitization.html
#
[KevinMarks] with svgshare, I do a full html5lib parse and if I find script elements I remove and regen the file
#
[KevinMarks] about once a month someone tries to embed script in the SVGs, and then emails me excitedly because it executes in their client before uploading, because I do that on purpose to deter them.
valuemachine and gRegorLove joined the channel
#
sebsel !tell [fluffy] Have you seen or considered TOML? No experience, but heard people praise it over YAML. https://github.com/toml-lang/toml
#
Loqi Ok, I'll tell them that when I see them next
#
Loqi [toml-lang] toml: Tom's Obvious, Minimal Language
[fluffy] joined the channel
#
[fluffy] Publ now has private entries with federated login 😄 😄 😄
#
[fluffy] https://github.com/PlaidWeb/Publ/tree/feature/147-private-content (not released yet, there’s still a few things I want to add before I do)
#
[fluffy] [sebsel] I hadn’t heard of TOML before, and that does look nice, but it’s also overkill for what I’m doing
#
[fluffy] https://github.com/PlaidWeb/Publ/blob/feature/147-private-content/tests/users.cfg is entirely the extent of what I need
#
sebsel nice! keeping it minimal is always a good choice. Can allways add complexity later :)
#
[fluffy] but thanks for the pointer anyway, that might be useful for other projects in the future. sebsel++
#
Loqi sebsel has 9 karma in this channel over the last year (33 in all channels)
#
[fluffy] I literally just needed a means of providing a `str->set(str) ` mapping.
#
[fluffy] even `configparser` is overkill for this. But I didn’t want to write my own parser especially when something exists in the standard library.
#
[fluffy] anyway, it is WAY past bed o’clock
[jgmac1106], valuemachine, [KevinMarks] and [mapkyca] joined the channel
#
@jgmac1106 Will you join us on a #feldgang this summer for #clmooc 2019? https://clmooc.com/clmooc-explores-the-world-the-feldgang-variations/ I think , I might want to play with the drop and hide a poem idea, maybe AR or just paper..wish I was smart enough to trigger a webmention with geofencing be a fun poem… https://quickthoughts.jgregorymcverry.com/2019/07/06/will-you-join-us-on-a-feldgang (twitter.com/_/status/1147455356152537091)
gRegorLove and djmoch joined the channel
#
@jgmac1106 Please let me know if you need help joining the #clmooc web ring, planet, or setting up webmentions on your blog. #feldgang is fun from fields of prose you cultivate. (https://quickthoughts.jgregorymcverry.com/s/20PL0a) (twitter.com/_/status/1147467821682741248)
#
@andybelldesign I think I’ll add this along with Webmentions on my site. It could also be a good option for folks using Hylia, too. https://andy-bell.design/links/203/ https://jamstack-comments.netlify.com (twitter.com/_/status/1147469322094292992)
#
[jgmac1106] [grantcodes] can I use any of these netlify tools or anything you built to quickly send and display webmentions on Glitch?
#
[jgmac1106] Like open this project->copy all the files into your project->switch endpoint
[grantcodes] joined the channel
#
[grantcodes] if you clone indieweb-starter.glitch.me that should do pretty much everything
#
[grantcodes] It also sets up indieauth & microsub for you
#
[grantcodes] & micropub
#
[jgmac1106] Okay that is super interesting and awesome!!
#
[grantcodes] I don't think it will display webmentions though just because it's not in the templates. It will store them though
#
[jgmac1106] Can it be copied into an existing project...i want to start people at <h1>hello world</h1>
#
[grantcodes] And there may be issues with glitch and the sleeping thing
#
[jgmac1106] Okay so would need to build a few display templates
#
[jgmac1106] I should learn that anyways
#
[jgmac1106] Could probably even make it a good "learn CSS" lessons for students
#
[jgmac1106] Ohh yeah thw wake up
#
[jgmac1106] It seems everyone on netlify is using iftt to trigger
#
[grantcodes] Yep, it would mainly be the views/post.html you would want to update. It uses nunjucks for templates
valuemachine joined the channel
#
[jgmac1106] I might just make one then.. Sounds too muxh for me let alone teaching... Will play with plugin
#
[jgmac1106] Sitting outside with coffee sketching those WP template/themes. One page of 9 IndieWeb themes... But basically 5-6 templates across them
Clment[m] joined the channel
#
[grantcodes] Huh? Using that starter site is too much or netlify is too much?
#
[jgmac1106] Sorry for lack of context. I am talking IndieWeb 101, people writing their first line of HTML
#
[jgmac1106] Was thinking start with the About Me page, then home page, then nav, then add posts with mf2, then notes, then photos
#
[jgmac1106] Displaying webmentions would be the last and probably hardest lesson... Since I have never tried myself
#
[jgmac1106] This is the teaching tool I will miss the most: https://github.com/mozilla/goggles.mozilla.org
#
Loqi [mozilla] goggles.mozilla.org: Look under the hood of any website and tweak all the things
#
[jgmac1106] Never found a better way to introduce HTML then having an easy way to put yourself on the local newspaper website
#
@andybelldesign A little http://webmention.io gotcha is that the feed has a default items per-page of 20, so if you’re pulling it for each @eleven_ty build like I am, you’ll lost all of your old ones. I ended up setting an obscene limit. https://andy-bell.design/notes/202/ (twitter.com/_/status/1147483499718414336)
#
[grantcodes] Yeah that's definitely not the goal of my tools. My stuff is good for a personal site, but editing it is not a beginner level. But webmentions are long long way from writing your first html
#
[jgmac1106] Other topic with rhe way autoauth works coukd I set it by geo coordinates and not url?
#
[jgmac1106] Like you can't see this post unless you are in this spot?
valuemachine and [kimberlyhirsh] joined the channel
#
omz13 My attempt to roll my own server are going well... I now have indieauth and micropub working (passing most of the micropub.rocks tests), and can create posts on my test server from quill and teacup :-)
#
omz13 But I am having a hiccup with Indigenous. When I try to log in, it gets as far as being granted a token, and then nothing...
#
omz13 Is there something I'm missing?
#
omz13 Any help/ideas appreciated
leg joined the channel
#
[grantcodes] omz13: do you have a microsub endpoint as well?
#
omz13 [grantcodes] no, not yet. Does it need one?
#
[grantcodes] Yeah that's its main purpose
#
[grantcodes] What is aperture?
#
Loqi Aperture is an open source Microsub server developed by Aaron Parecki https://indieweb.org/Aperture
#
[grantcodes] That's probably the easiest way to get one up and running
#
sknebel hm, it working as just a micropub client would be kind of nice, even if the UI isn't optimized for it
#
omz13 [grantcodes] Ah. I wish it told me that! Guess I will be implementing microsub sooner than I thought.
#
omz13 sknebel That's what I assumed; that I could use it as a nice micropub client to test my implementation
#
[grantcodes] On iOS I think it's going to be separated out into 2 apps. But not sure about Android
#
sknebel you could just set up e.g. an aperture account on the hosted aperture and not use it for now, as a very quick workaround
#
sebsel I believe this is part of why [eddie] is ending Indigenous (for iOS) and separating it into three different apps.
#
sebsel at least one of those would be usable by you now, omz13
#
sebsel omz13++ for getting micropub working
#
Loqi omz13 has 1 karma over the last year
#
sebsel that's a big step :)
#
omz13 sebsel Thanks! I'm slowly getting all the little pieces working.
#
sebsel yea want to clarify: having a homepage that represents you on the internet is the one step you need for IndieWeb. That is the main thing.
#
sebsel But of all the cool tools that come after that, Micropub made the biggest impact for me, for it enabled me to post more frequent / easy.
#
sebsel It's a core building block if you want a social-media-like website.
#
omz13 I have my minimal homepage at the moment. At some stage I will move it to my new server and things will be more interesting.
[tantek] joined the channel
#
[tantek] !tell Jacky a bit delayed, re: how to display reply content from others on your site, we've been collecting various how-tos, exampes, techniques here: https://indieweb.org/comments
#
Loqi Ok, I'll tell them that when I see them next
#
[tantek] !tell Jacky been trying to use the singular /reply meaning a reply post on your own site, and the plural /comments to mean display of others's replies on your site. Similarly, /like vs /likes, /repost vs /reposts, and even /RSVP vs /RSVPs!
#
Loqi Ok, I'll tell them that when I see them next
#
@mxbck ↩️ Same here. You can provide a `since` param though, fetch only webmentions after a certain timestamp, and cache the rest. (twitter.com/_/status/1147513635524268033)
valuemachine joined the channel
#
[tantek] via the meta channel: https://twitter.com/leralle/status/1147462884722712576
#
@leralle POSSE https://indieweb.org/POSSE macht Probleme, wenn die Grenze der maximal verfügbaren Zeichen des zu syndizierenden Inhalts inmitten einer URL verläuft. Da muss man sich was überlegen. #indieweb. Wie lösen das denn andere Tools? (twitter.com/_/status/1147462884722712576)
#
[tantek] roughly speaking, one POSSE challenge is potential errant truncation of content in the middle of a URL (e.g. when POSSEing to Twitter)
#
[tantek] (and just about to cite the URL on the wiki for this, I find some errors in the content there!)
#
[tantek] https://indieweb.org/Twitter#POSSE_abbr_note_to_twitter
#
[tantek] looks like I'm still using 23 as the URL encoding length for tweets
#
[tantek] whoa I just asked Google "how many characters does a URL count as in a tweet" (web search)
#
[tantek] and it came back with one of those special search result boxes with "23 characters" in big text!
#
[jgmac1106] Some interesting stuff on CPanel price hike: https://bavatuesdays.com/the-year-reclaim-hosting-grew-up/
#
[jgmac1106] And talk of creating an open source alternative that would be cool foe community
jugheadjones69 joined the channel; jugheadjones69 left the channel
#
[tantek] Documented: https://indieweb.org/Google_Search#Featured_Snippet (with screenshot - check it out!)
#
[tantek] and now to fix that Twitter POSSE content
#
[tantek] fixed. could use a review by anyone who is doing their own POSSE tweet string computations: https://indieweb.org/Twitter#POSSE_abbr_note_to_twitter
#
[grantcodes] I find that section really confusing
#
[tantek] it is a bit terse in parts (jargon dense even for dev)
#
[tantek] it may make (a little) more sense in the context of starting reading from https://indieweb.org/Twitter#POSSE_Notes_to_Twitter
#
[tantek] (the larger section it is one part of)
#
[tantek] that being said, definitely interested in making it clearer. that whole larger section started as me braindumping all the thoughts I had to go through, details I had to figure out, to get POSSEing to Twitter working on my site back in 2010!
#
[tantek] (figured better to share something than nothing there, since it did take a lot of work to research, figure out details, code etc.)
#
[grantcodes] I personally would find it easier to follow if the specific methods (eg cassis functions) were moved to a separate section. So it became more about what the requirements are, and then a potential way to implement it after.
#
[tantek] That's good feedback. Thanks!
#
[tantek] Also I think I have lots to update re: permashort citations
#
[tantek] Ugh, too much to be able to update them all "right now" so I'm going to capture these
#
[grantcodes] Also took me a while to understand what permashort citations are reading though the pages
#
[tantek] tl;dr I need to re-assess /permashortcitations completely since I stopped using them myself on POSSE copies
#
[tantek] and I need to check all existing examples to see who (if anyone) is still using them
#
[tantek] tinbox << simplify [[Twitter#POSSE_Notes_to_Twitter]] by: <br>1. removing use of [[permashortcitation]] (and only using [[permashortlinks]]) and <br>2. extract inline use of CASSIS functions in POSSE explanations, and instead provide them as specific techniques after the full prose explanations.
#
Loqi ok, I added "simplify [[Twitter#POSSE_Notes_to_Twitter]] by: <br>1. removing use of [[permashortcitation]] (and only using [[permashortlinks]]) and <br>2. extract inline use of CASSIS functions in POSSE explanations, and instead provide them as specific techniques after the full prose explanations." to the "See Also" section of /tinbox https://indieweb.org/wiki/index.php?diff=63400&oldid=63385
#
[tantek] tinbox << re-evaluate [[permashortcitation]] examples and update that page according to actual practices as of today
#
Loqi ok, I added "re-evaluate [[permashortcitation]] examples and update that page according to actual practices as of today" to the "See Also" section of /tinbox https://indieweb.org/wiki/index.php?diff=63401&oldid=63400
valuemachine, [kimberlyhirsh], BenLubar and [KevinMarks] joined the channel
#
[KevinMarks] With twitter's changes to url handling the shortness makes less sense
[jackjamieson] joined the channel
#
[tantek] Only a little. Plenty of usecases beyond twitter
#
[tantek] I switched to same domain yet with a shortpath
#
[tantek] Kevinmarks for example, URLs in a Instagram caption or comment are not linked, yet another “typable” URLs usecase
BenLubar and [cleverdevil] joined the channel
#
[cleverdevil] Thinking about my new /following page... the current implementation has each feed as a `u-follow-of` with an `http` or `https` `href`... considering changing these to `feed://` URLs so that when people click/tap on the links, they can be opened in their reader... but can’t decide if this is somehow incorrect.
#
[cleverdevil] Any thoughts?
#
[grantcodes] My thought is does that actually work? 😅
#
[grantcodes] How many people actually have something that will handle feed://
#
[cleverdevil] Heh, good question.
#
[cleverdevil] That said, if the average person taps/clicks on a link on the page, their browser is highly likely to either display a mess of JSON or XML, or to download the linked feed.
#
[cleverdevil] Some of the feeds are actually h-feeds, and then they’ll at least see real content.
#
[cleverdevil] I think the default on most OSes for handling unknown link types is to direct the user to some app store or something where they can find an app to handle those link types.
#
[grantcodes] Maybe have a link to the site root for humans and the feed URL for machines? Although the root isn't always guaranteed to be what you're actually following
#
[cleverdevil] Yeah, that’s sort of the struggle here. For people who land on that page who are very familiar with feeds, they’ll be fine.
#
[cleverdevil] Maybe I could link to some service that previews feeds....
#
aaronpk this sounds a lot like the same problem as we were trying to solve with a "like"/"reply" button
#
[cleverdevil] Struggle would be finding a service that actually supports RSS, Atom, JSON Feed, and h-feed.
#
aaronpk what are webactions?
#
Loqi A web action is the interface and user experience of taking a specific discrete action, across the web, from one site to another site or application https://indieweb.org/webactions
#
[grantcodes] If you want the feed link visible for people who like that I would make the name of the feed link to the root URL and add a little RSS icon to the feed. (Or don't if it is an mf2 feed)
#
[cleverdevil] Similar, but I think a preview is more useful.
#
[cleverdevil] I am now wondering if building a service to preview and then have a webaction for subscriptions may actually be useful.
#
aaronpk that sounds kinda like https://www.subtome.com/
#
[cleverdevil] Oh, yes, that looks very similar to what I am describing.
#
aaronpk it'd be cool to also show a preview
#
[cleverdevil] I think this will be my next project.
#
[cleverdevil] Could even be added to the hosted version of Together... though maybe too orthogonal.
#
[grantcodes] Would it kind of be a ui for x-ray more or less?
#
[grantcodes] What do they put x-rays on to look at them? A light box?
#
[cleverdevil] :D
#
[grantcodes] Well together already has all the parts to render a feed
#
[cleverdevil] Yes, which is why its tempting.
#
[cleverdevil] The other benefit would be that people could then one-click “follow” potentially, if they are signed in.
#
aaronpk Oh yeah I added feed preview to Monocle and forgot to mention it at Summit! https://monocle.p3k.io/preview
#
[cleverdevil] Shiny!
#
[cleverdevil] Can I pass in the feed URL as a GET parameter?
#
aaronpk Yep
#
[cleverdevil] Awesome. I’ll start here.
#
[cleverdevil] I think the way I’ll do it is to keep the structure of the page, with the links being href to the feed, but I’ll add an onclick handler to preview it.
#
[cleverdevil] That way you can still parse the page with an mf2 parser to get the h-feed of posts with u-follow-of links.
#
[cleverdevil] But, users who tap will get something useful.
#
[cleverdevil] Done.
#
[cleverdevil] Looks great, thanks for that [aaronpk]! Perhaps consider adding webactions for subscription to the monocle preview.
#
[cleverdevil] [aaronpk]++ for monocle preview page.
#
Loqi [aaronpk] has 54 karma in this channel over the last year (235 in all channels)
valuemachine joined the channel
#
aaronpk Yeah at the very least if you're logged in to Monocle it should let you subscribe
#
[cleverdevil] OK, off to the movies for Spider-Man: Far From Home!
[schmarty] joined the channel
#
[schmarty] cleverdevil++ aaronpk++ what a good idea and easy plumbing thanks to some great building blocks!
#
Loqi cleverdevil has 20 karma in this channel over the last year (56 in all channels)
#
Loqi [schmarty]: [grantcodes] left you a message 2 days, 8 hours ago: I was just working on some micropub client stuff and realised it will be pretty close to what you described at https://martymcgui.re/2019/06/30/232547/ I'm starting lower level though, with a set of react components that automatically build out mf2 properties. But could be extended to include the sort of interfaces you mentioned
#
Loqi [schmarty]: [grantcodes] left you a message 1 day, 21 hours ago: kablamo! Redeveloped my micropub client components to be more reusable: https://grantcodes.github.io/micropub-client-editor
#
[schmarty] grantcodes: NEAT. Automated form building is wild!
#
[grantcodes] Oh I changed the url since then https://grantcodes.github.io/postrchild-editor-base
#
[schmarty] Does it have a way of adding multiple values (eg photo array)? Ooh, or data types (url, file uploads, nested values)?
#
[grantcodes] Photo arrays and previews are on by default
#
[grantcodes] None of the base fields have nested values (apart from html) but it would be possible
#
[grantcodes] The only kinda weird thing it does it it puts JavaScript `File` objects into `photo`, `video` etc, so you have to process that
#
[schmarty] Ah interesting!
#
[grantcodes] I think I will probably make an extended version that will have it's own styles and nicer stuff for media and whatnot
#
[grantcodes] You can play around with that story and it will show you the properties it returns eg https://grantcodes.github.io/postrchild-editor-base/?path=/story/components-composableform--photo-post for photos
#
Loqi [grantcodes] has 31 karma in this channel over the last year (46 in all channels)
#
sknebel [grantcodes]++ wow this looks neat
valuemachine, strugee, BenLubar, [zach] and KartikPrabhu joined the channel