#dev 2025-05-26
2025-05-26 UTC
grufwub and LadyBanana joined the channel
jeremy, barnaby, mort8088, Robert1, bugliker0 and stefen joined the channel
balintm joined the channel
# 
perryflynn Is a static site generator an option? Otherwise I only know WordPress and TYPO3.
barnaby and [Murray] joined the channel
# 
[Murray] Pretty out there question: does anyone know of a way to limit Node.js processes per CMD? I'm experimenting with running some of my sites on a CPanel host (it's been a fun weekend of outages and issues 😄), and the main blocker right now is just that each site ends up competing for resources. I have a hard limit of 100 processes, and each Node app seems to want to spin up as many as it can.
# perryflynn doesnm: I see
# 
[schmarty] KevinMarks: oh wow! Quite a rabbit hole.
barnaby, Pixi, sebbu and sp1ff` joined the channel
# zachary.kai A question, please. Is it worth adding 'en-US' to the lang attribute of html to specify english region?
# osteophage I don't know the answer to that, but this question reminded me I should add a section on the lang property to the beginner guide I've started working on, so kudos for that.
bugliker06 joined the channel
# [Murray] @zachary.kai are you talking about the root `<html>` element? If so, yes, it's definitely worth it; it has accessibility and translation benefits! If you're talking about using the `lang` attribute on a subsecton of a site (say a `<blockquote>` or a `<p>`), then specifying the language is typically enough (e.g. `en`) and is still definitely worthwhile. Very few things (if any?) actually use the additional context of `-US`. That said, as
[social] joined the channel
# [social] [KevinMarks] that looks interesting. I don’t have issue with Pinboard and in recent months have had productive chats with Maciej and there have been a fair amount of updates. I like the sharing out, but also looking at what those in my network are bookmarking. I’ve always had a back up to my social bookmarking (starting with http://del.icio.us), my personal site’s homemade CMS started as a (what is now called) linklog (and travel log t
# [social] bring back into my Blogger when I got home, due to many hotels blocking FTP back in the late 1990s and early 2000s).
# [social] I have a lot of not so public second bookmark capture services locally in apps, but I keep thinking of rebuilding my linklog, importing my ~78k bookmarks, and keeping a structure that could work to integrate somewhere for networked social bookmarks and/or linklogs.
# [social] I’ve set aside the Alex Chan piece for later reading.
GuestZero_ joined the channel
bterry joined the channel
# zachary.kai sknebel / [Murray] / [tantek] That's great to know, thank you so much! It's on my list of things to implement.
# carrvo artlung (or any other css guru): I am using `grid-template-columns` with `grid-column: N / span 1` to give the Nth column, but how do I ensure that it is the only element for the row without having it's width become the whole row (and lose positioning)? Or is grid simply the wrong approach in the first place?
[artlung] joined the channel
# 
[artlung] harder (for me!) to visualize without seeing the fr'instances. But that makes me kind of think that you would find repeat and auto-fit useful. See this stackoverflow answer which does a nice job. https://stackoverflow.com/a/46227025/63094
# [artlung] _(for most layouts, there's a way to do it in grid, but if you have more... arbitrary elements to be added as child elements of to the grid display: flex is great, and then you decide on the max-width and flex-grow of the child elements and things slot into place. all of this is easier said than done but you could do worse than sharing here to for feedback)_
balintm joined the channel
# carrvo I can show it at the next HWC for sure.
duanin2, luca and barnaby joined the channel
ttybitnik and balintm joined the channel
barnabywalters joined the channel
grufwub joined the channel
# trwnh (catching up) [tantek] capjamesg [KevinMarks], my use case is most closely (3) or subset: link to the "edit link" of the "same"/"source" resource, but potentially cross origin. just using gitea/forgejo instead of github. it doesn't make sense to point to anything other than specific _edit uri
# trwnh i think the real pain point here is lack of consistent cross-origin (federated) identity for the agent
# trwnh in the ideal case you are already authenticated to the website so it can selectively render a rel=edit link while "knowing" that when you land on the _edit page, your current credentials should be accepted just as well
NaomiAmethyst3 joined the channel
# trwnh the "misleading" part seems to be the idea that, when logged out of gitea/forgejo, you will be redirected to a login, then redirected back to the _edit page
# trwnh to me, this is not really any different than linking to any other resource that might happen to redirect or require auth. if i reply to a private post then i have no idea who someone else's audience includes. "in reply to this thing you can't see" might be a degraded UX but it doesn't make the "reply" relation/predicate somehow inaccurate
barnaby joined the channel
# trwnh basically i am making the claim "here's where you can edit this page", but when you get there the bouncer might not recognize you immediately (because no consistent Web identity) and you will be asked to see the front desk before coming back
# 
capjamesg In Firefox, you can selectively show a web extension depending on a condition. This means you can show an edit button only if a page is editable. Showing a button only if a user can edit the page feels like the ideal experience. Promoting rel=edit without any precondition regarding auth makes it hard to strive toward that goal.
# trwnh i don't know if i want to add auth to a site solely to detect whether i should render an "edit this page" link, when the invitation to edit the page extends to the unauthed general public also (with the auth at the destination being a formality of the edit *process*, not of the edit *relation*)
# trwnh maybe? it's kind of an "edit source" where "source" is different from view-source:
# trwnh the proposed behavior is essentially two steps instead of one
# trwnh you have no idea whether the rel=code will let you rel=edit
# trwnh is there a way to detect whether you are authed to a different origin? presumably no, it could even be a security issue
# capjamesg If I follow the "Edit this page" button on https://www.elastic.co/docs/reference/query-languages/ when I'm not logged in to GitHub, I see:
# capjamesg [edit] If I follow the "Edit this page" button on https://www.elastic.co/docs/reference/query-languages/ when I'm not logged in to GitHub, I see:
# 
[tantek] I agree with capjamesg that it makes more sense to show the general public a "view source" rel=code link, just as the http://indieweb.org wiki does when you are not logged in
# [tantek] If you are logged into your own site, then sure, go ahead and detect that on your backend and show yourself the edit link because you know if you are logged into your site as you (e.g. via IndieAuth), then you are most likely also logged into the cross-origin edit link, and furthermore, you as the individual who built it has full fore-knowledge of what to expect so you won't be surprised
# trwnh maybe there's some kind of weird CORS thing you can declare to say that going from wiki.trwnh.com/foo to git.trwnh.com/sites/wiki/_edit/content/foo.md is okay, like git.trwnh.com declares ahead of time that its local storage can be accessed by wiki.trwnh.com and check for a cookie or something. seems complicated but how else would wiki.trwnh.com know you are logged into git.trwnh.com
balintm joined the channel
# trwnh i guess i can see it being expected in a private deployment for some organization perhaps (you might reasonably expect SSO for wiki to extend to gitea)
# trwnh but i just don't think we'll solve identity across the entire Web overnight sadly 😔
# trwnh it would be unfortunate to say "rel edit should not be used cross origin bc auth reasons" but that seems to be the takeaway
# trwnh right, i was thinking a script hosted on git.trwnh.com could figure out if you are logged in, then you CORS on wiki.trwnh.com to allow the script to run from git.trwnh.com
# trwnh i'd like for this to be static site friendly since i use Hugo to build all this
# [tantek] e.g. sign-in with your IndieAuth, then if the website uses Github for example, it could implement an opt-in checkbox [ ] or button [Sign-in with GitHub] to enable "edit" links, and then your site can implement e.g. https://docs.github.com/en/apps/creating-github-apps/writing-code-for-a-github-app/building-a-login-with-github-button-with-a-github-app for that
# [tantek] Similar to how https://brid.gy/ implements a "Sign in with GitHub" button to enable publishing (POSSEing) to GitHub
# capjamesg trwnh I used to have a bookmarklet for editing my site: https://jamesg.blog/2025/02/16/my-static-site-editing-bookmarklet
# capjamesg [edit] trwnh I used to have a bookmarklet for editing my site: https://jamesg.blog/2025/02/16/my-static-site-editing-bookmarklet
# trwnh at the very least i might rework my edit link partial in Hugo to try using a script or extension but i am not looking forward to it haha
# 
Loqi rel-edit is a microformat for linking a page to a URL that lets you edit a page https://indieweb.org/rel-edit
barnaby joined the channel
# [tantek] yeah re: fake login screens and phishing, a big part of improving security on the web is NOT teaching users to be phished, i.e. encouraging existing trusted/legitimate sites to NOT adopt UI patterns which inadvertently teach users to be phished. Thus links that claim to do one thing (verb), but actually make the user sign-into another domain first, should be avoided.
bugliker0 joined the channel