#dev 2019-11-05

2019-11-05 UTC
bekoDiscord[m], Kongaloosh, dmcweeney, HexDiscord[m], [schmarty], [chrisbergr], KartikPrabhu, uniquerockrz, [chrisaldrich], FordDiscord[m], gRegorLove, cweiske, vilhalmer and krychu joined the channel; FordDiscord[m] left the channel
#
gRegorLove Welcome, mblaney are you new to the indieweb? ;)
#
gRegorLove mblaney++
#
Loqi mblaney has 1 karma in this channel over the last year (10 in all channels)
#
mblaney in some ways gRegorLove.... maybe I can log into indiebookclub now ;-)
#
gRegorLove ha! true
#
mblaney I just gave it a go and it found all my endpoints, but still complains about a path in my profile url?
[fluffy] joined the channel
#
gRegorLove hm. did it work on retry? I see an account for you
#
gRegorLove I'll have to take a look tomorrow
#
mblaney no it looks like one of us is adding or removing the final '/' that makes the url different? no worries happy to chat more later.
#
aaronpk sad but true https://xkcd.com/2224/
#
Loqi [XKCD] Software Updates https://imgs.xkcd.com/comics/software_updates_2x.png
satyanweshi, [chrisbergr] and [jgmac1106] joined the channel
#
[jgmac1106] mblaney++ can I change the fron page of ihazawebsite...like add some static info
#
Loqi mblaney has 2 karma in this channel over the last year (11 in all channels)
SevenTwenty joined the channel
#
[jgmac1106] Right now I share this url with people https://ihazanothersite.jgregorymcverry.com/blog rather than index
#
@jgmac1106 ↩️ The website deployment just happens, you do nothing else but start reading and writing. If you wanted to get a class sharing through webmentions and building a class social reader I could not tink of a better way. Wonderful no frills writing space (https://quickthoughts.jgregorymcverry.com/s/1GwdFF) (twitter.com/_/status/1191661036534947845)
SevenTwenty, y____h, swentel, asymptotically and [tantek] joined the channel
#
GWG swentel
#
GWG swentel: I did think of asking you for help on something
#
swentel GWG, on?
#
GWG I didn't want to learn to write an Android app
#
GWG I ended up hacking something together using Tasker
#
GWG https://david.shanske.com/2019/11/01/3018/
#
Loqi [David Shanske] Just hacked up a script using Tasker for Android that extracts the location from the Southwest inflight wifi and posts it to my location tracking server… which is queried by my website. Fun
#
GWG This thing
#
GWG If I could have thought of a way it fit into Indigenous I might have asked
#
swentel I don't really track myself, so never thought about adding it - although it would be fun, and actually relatively easy as I have most of the location code in anyway
#
swentel for my geocache post (or checkin, but don't use that one much)
jeremych_ joined the channel
#
swentel ok, updated my brainstorm on 'read later'. An api addition to move posts from one channel to another would be fine too :)
#
aaronpk I think someone has suggested a feature to move posts between channels before. that seems simpler
#
swentel yeah, updated it like that actually
#
GWG swentel: If you want me to spec location out, just as a future thing, I would
#
GWG So it is documented
#
swentel aaronpk, ah yes, issue #40
#
swentel funny, one before mine
gxt joined the channel
#
mblaney jgmac1106 yes you can change the front page. Try clicking tools->edit buttons at the top, then borders will appear around areas you can edit. Click anywhere in those for a toolbar.
#
@miklb ↩️ @draftsapp allows you to use Actions which is just JavaScript under the hood. I use micropub to post, and deeper under the hood webmentions & http://brid.gy to syndicate. Then likes & replies on Twitter backfeeds to my site. It really does feel like magic. (twitter.com/_/status/1191700395074211841)
#
@miklb ↩️ @draftsapp allows you to use Actions which is just JavaScript under the hood. I use micropub to post, and deeper under the hood webmentions & http://brid.gy to syndicate. Then likes & replies on Twitter backfeeds to my site. It really does feel like magic. (twitter.com/_/status/1191700395074211841)
#
swentel aaronpk, add my thoughts on that issue, will ping back when I have code and a working implementation server/client (drupal/indigenous)
#
swentel *added
#
aaronpk cool cool
#
swentel this approach should go quite fast, most of the code is already there anyway
#
aaronpk that's good to hear
#
swentel ok, PHP ready for item move, up to indigenous now :)
#
[jgmac1106] i have gpx files saved for my last few trips waiting for the time when I know how to do stuff with it
#
GWG [jgmac1106]: Stuff like?
#
petermolnar [jgmac1106]: write an XSL that turns any GPX into a leafletjs map ;)
#
[jgmac1106] Learn stuff like ^^^
#
[jgmac1106] I have a few trips, lot of mountain biking and runs
#
[jgmac1106] I want to match the geolocation of photos and posts and pin them on maps.... But now I want so much moar... After seeing Indiana Jones
[LewisCowles] joined the channel
#
petermolnar [jgmac1106]: https://www.sno.phy.queensu.ca/~phil/exiftool/geotag.html - geotag the photos themselves from the gpx data then use that in the posts
#
GWG [jgmac1106]: Do you have the hat?
tomasparks, [KevinMarks] and gxt joined the channel
#
[jgmac1106] Not really one for hats, maybe a wool newsboy in the Winter but that's about it... Even if I wear too many
dougbeal|mb1 joined the channel
#
GWG I just got it...Indy Web...
#
GWG I missed that on the first read
#
GWG But adactio's implementation notes seem simple enough to add a static map and eventually a dynamic one
dougbeal|iOS joined the channel
#
petermolnar Indy Web... I ... I need a drink...
[chrisbergr], shah^, [tantek], JBmc, [qubyte], [snarfed], [dougbeal] and gRegorLove joined the channel; JBmc left the channel
#
gRegorLove !tell mblaney Can you try IBC again? I updated that error message to include the returned profile URL.
#
Loqi Ok, I'll tell them that when I see them next
#
@janboddez ↩️ I’m going to use Micropub (both the protocol and the WP plugin) for posting, and have a filter hook in place to set the right post type based on whatever mf2 properties are present. (Next up is getting some more feeds into that Microsub aggregator.) (twitter.com/_/status/1191801553495187458)
vika_nezrimaya, jbove, [jgmac1106] and BigDuckEnergyDis joined the channel
#
[jgmac1106] Oohh just had random thought given I am using php to call up my urls with /<?php echo $_SERVER['PHP_SELF'];
#
[jgmac1106] Can I write that with php math to either -1 for rel=prev and +1 for rel=next? My url structure is date+note number
#
[jgmac1106] Maybe not echo the file but echo date and X+ or - 1...hmmmm
#
gRegorLove [jgmac1106], You probably could, but you also shouldn't echo PHP_SELF like that without some sanitizing. That can allow XSS
#
[jgmac1106] Okay since I don't even know what CSS is I will just go back to manually adding the url... Trying to automate as much as possible with my limited skill
#
gRegorLove what is xss
#
[jgmac1106] Datetime will be next.... Just need to figure out the one that won't change if I edit
#
Loqi https://indieweb.org/XSS
#
[jgmac1106] gRegorLove++
#
Loqi gRegorLove has 8 karma in this channel over the last year (56 in all channels)
#
gRegorLove Basically someone can access: /file.php<script>alert('do bad things via javascript on your page');</script>
#
[jgmac1106] Thank you... I had no idea... Google is a dangerous place for those lacking skills
#
gRegorLove Heh, especially with PHP code snippets, yeah
#
[jgmac1106] Not so bad on dekstop manually adding url but the more I can automate the easier to publish on mobile...
#
[jgmac1106] gRegorLove if i just echo a date at end of url do I face same issue?
#
[jgmac1106] Need to set up some basic sanitation as next goal no matter what me thinks now
#
gRegorLove [jgmac1106], Is this in WP, Known, or plain ole PHP?
#
gRegorLove htmlspecialchars is pretty solid to protect PHP_SELF, I think: https://stackoverflow.com/a/6080121 but if you're in WP or Known there's probably a method to get the permalink URL
#
gRegorLove I know there is in WP; guessing Known has something too.
#
[jgmac1106] Plain ole php
#
[jgmac1106] Like https://github.com/jgmac1106/homepage/blob/master/notes/imgtemplate.php
#
[jgmac1106] Thx for link will look tonight
#
gRegorLove Gotcha. That htmlspecialchars is what you'll want then
#
mblaney gRegorLove: The token endpoint returned a profile URL with a path. URL paths are not currently supported. Profile URL: https://mblaney.xyz
#
Loqi mblaney: gRegorLove left you a message 3 hours, 51 minutes ago: Can you try IBC again? I updated that error message to include the returned profile URL.
#
Loqi Malcolm Blaney
#
gRegorLove weird!
#
gRegorLove Wonder if parse_url() doesn't recognize .xyz
#
mblaney I don't think parse_url validates domains, just returns the structure.
#
gRegorLove Yep. Ended up being that IBC is expecting the / path. Easy fix, just a moment.
#
mblaney the only thing I noticed is that a path of '/' is being added and removed during the flow, not sure where or if that is causing the problem.
#
mblaney ah. snap
#
mblaney the thing is I tried adding a path, but maybe I remove it during the request? would like to know if I'm tripping up on the spec there.
[chrisbergr] joined the channel
#
gRegorLove IBC is doing this part with the entered profile URL, so whehter you enter / or no path on the domain, it sends with / to your auth endpoint
#
gRegorLove https://indieauth.spec.indieweb.org/#url-canonicalization-p-1
#
gRegorLove the third paragraph there
#
gRegorLove mblaney, try signing in now
#
gRegorLove I do think your token endpoint should return with the / path
#
mblaney thanks gRegorLove works now :-)
#
gRegorLove thanks for the heads up!
#
mblaney sounds like it was on me, happy to change that to stick to the spec.
#
gRegorLove bit of both. clients should treat it as if the path is there, too
#
mblaney I created a post but a bug in my micropub endpoint stopped it from posting to my site :-(
#
mblaney feature request for you, maybe don't create the post on indiebookclub if you get an error? or let me edit/remove/re-try?
#
gRegorLove sounds reasonable. could you open an issue?
#
mblaney yup done
[LewisCowles] and [chrisaldrich] joined the channel