#dev 2020-01-05

2020-01-05 UTC
[cleverdevil] joined the channel
#
dmcweeney How do I get space between the Github font awesome icon and the first paragraph "The 2019 commercial" on my front page www.drewmcweeney.com
#
dmcweeney Here is what I have
#
dmcweeney <p></p><center><i class="fab fa-github fa-7x"></i></center><p></p> <p>The 2019 TV Commercial for Southern Connecticut<br>State University is finished. I am so glad to be the featured student for this one. Here it is!</p>
#
KartikPrabhu dmcweeney: better to ask general dev questions (not related to indieweb) in #indieweb-chat channel
#
dmcweeney Willdo
turona1, simons and [tantek] joined the channel
#
GWG aaronpk: The Compass share duration parameter, is that minutes?
#
aaronpk seconds
#
aaronpk probably should have made it minutes tho
#
GWG I figured. Just checking
simons joined the channel
#
GWG I made some updates to my plane tracking code for transatlantic.
#
GWG jacky: Did you say you were using PhoneTrack?
[Marlin_Forbes], simons, KartikPrabhu, [fluffy], [kimberlyhirsh], [cleverdevil], roboX758, [mapkyca] and [tantek] joined the channel
#
GWG I am thinking about IndieAuth again and improving scope management
#
GWG WordPress has this concept of creating posts but not being able to publish them.. that doesn't map to any Micropub scope
simons, [asuh], Stef, asymptotically, [mapkyca], [LewisCowles], [jgmac1106] and [jeremycherfas] joined the channel
#
aaronpk GWG: that's cool! Like creating a draft?
#
GWG Yes, without permission to publish it
#
aaronpk I'd actually like that for myself to try out other micropub apps. If I know I could authorize them to create drafts then I'd be more likely to try out random appps
#
GWG aaronpk: What would we call that scope?
#
GWG draft?
#
aaronpk sounds reasonable
#
GWG Wonder who else might want that
#
GWG And how we get implementation
#
GWG For me, I used to have a setting to set all Micropub posts to draft
#
GWG If I vanish, it's because the flight left. No WiFi on this
[tantek] joined the channel
#
[tantek] Ooh “draft” permission is a great idea
#
[tantek] It’s like self-moderation!
#
[tantek] which can also be useful for certain times of day
#
[tantek] I think Gmail has a feature that doesn’t let you email between certain (late) hours
#
[tantek] Is it possible to make temporal scopes? Eg ability to “post” only between 6am and midnight local time? And the rest of the time just save to draft? Or would that just be a serve implementation detail?
[Sadik_Shahadu], [email096] and [asuh] joined the channel
#
petermolnar ok, this is new. I got a mail to abuse@petermolnar.net with this: https://www.openbugbounty.org/reports/1060902/ - stating someone found and XSS vuln. on my site. But I can't access the why. Had anyone received anything like this before?
#
petermolnar it's particularly interesting, given most of my js is inlined and the site is static
#
asymptotically if it's anything like hackerone you can probably just ignore it. people run automated tools against your site that produce a lot of false positives, mindlessly send you the results, and expect a payout
#
petermolnar that's what I thought to be honest
#
petermolnar I'll wait for the disclosure, and see
#
asymptotically your server logs might show what the attacker was looking at, if you have access logs enabled
NinjaTrappeur joined the channel
#
petermolnar I completely forgot about my access logs O.O
#
petermolnar but, in the meantime, I think I did find it, and they were correct, there was indeed an unsanitized string in my search php
#
petermolnar the log shows the same to be honest
#
Zegnat He, I was just trying to do a console log from search :P
#
Zegnat It was the only field I could think of on your site that could lead to XSS
#
petermolnar I had to think it through as well
#
Zegnat Though there is not a lot of data that could leak from your site, petermolnar... What are they going to do, steal my style preference? :P
#
petermolnar :D
[CrowderSoup] joined the channel
#
[CrowderSoup] GWC I really like the idea of a "draft" permission as well. I know it would be useful for people who have guest posts on their blog as well, to allow a writer to push a post to their blog but only as a draft.
[Michael_Beckwit and [tantek] joined the channel
#
[tantek] Maybe this is the difference between “create” and “publish” permissions
#
GWG [tantek]: that's how WordPress does it
[cleverdevil], [mapkyca], [LewisCowles] and KartikPrabhu joined the channel
#
@BestDealsOnlin7 New Sealed #LEGO Atlantis Submarine Neptune Microsub 20013 Brickmaster 63 Piece $8.97 (0 Bids) End Date: Sunday Jan-12-2020 13:47:40 PST Buy It Now for only: $11.97 Buy It Now | Bid now | Add to watch list https://ebay.to/2tuIBrG (twitter.com/_/status/1213941638097178626)
#
KartikPrabhu ha! microsub!!
simons joined the channel
#
Zegnat It is its official name, also according to Brickset, but the name doesn’t seem to be anywhere on the actual packaging. Else it would’ve been more fun to buy as an IndieWeb display piece
spread12, Googol303623[m], [Michael_Beckwit, [tantek] and gxt joined the channel; spread12 left the channel