#stream 2024-07-04

2024-07-04 UTC
Soni, gRegor and barnaby joined the channel
#
Loqi [@weirdwriter] If you liked I joined Bluesky my feed URL is https://robertkingett.com/feed/ #RSS #IndieWeb #SmallWeb (https://tweesecake.social/@weirdwriter/112726746150684801)
barnabywalters joined the channel
#
Loqi [@inautilo] #Business #Findings... (https://mastodon.social/@inautilo/112727018419419490)
[KevinMarks] joined the channel
#
Loqi „Kev Quirk answered the question in his blog and I wanted to add my two cents on top. It’s a topic close to my heart as a website owner and personal web advocate. For Kev, the main reason to have a personal site is ownership. When you are only using social sites, you are... (https://www.pottbayer.de/2024/07/02/why-a-personal-site-rather-than-social-media-presence/)
#
Loqi [@villepreux] Hi #fediverse, #indieweb, #amateur #webdev s and all those who own their #website !... (https://mastodon.social/@villepreux/112728353125961672)
[jeremycherfas] joined the channel
#
Loqi I'm using an Slack Theme on Hugo and added alt-text through a markdown file. I noticed that it generated an tag below the image as well as applied alt-text to the image. Would this be alright for screen-readers or would it be annoying for them? #WebAccessibility #IndieWeb (https://blahaj.zone/notes/9vavusp9wedq0jmi)
GWG joined the channel
#
[tantek] ^ looks like a failure to escape an HTML tag there somewhere in the pipeline. See where it says "generated an tag"? Note the double space between "an" and "tag". I’m guessing an HTML <tag> of some sort was there and got parsed out which is a possible security vulnerability
#
[tantek] ah tag = figcaption in the original
#
[tantek] It's not Mastodon, it's Sharkey! (A fork of Misskey apparently)
#
[tantek] cc [aaronpk] [snarfed] since I expect you'd want to know about different implementations and how they escape (or don't) HTML tags in posts
ACG and Polya01 joined the channel
#
aaronpk oh dear
#
aaronpk huh, i wonder where that got mangled
#
aaronpk in aperture it is `<code></code>`
#
aaronpk looks like the problem starts at the source, which is mastodon's RSS feed https://mastodon.social/tags/indieweb.rss
#
[tantek] probably worth tracking down, like is it a Sharkey RSS problem, or did you read it via ActivityPub or indieweb.social RSS problem or something else?
#
aaronpk this is what's in the mastodon rss feed: `I noticed that it generated an &lt;code&gt;&lt;/code&gt;&lt;/p&gt;&lt;span&gt; tag`
#
aaronpk i see the missing tag in mastodon's HTML view too
#
aaronpk https://indieweb.social/tags/indieweb
#
aaronpk so, unclear whether it's sharkey's activitypub delivery problem, or mastodon's activitypub consumption problem
#
[tantek] a-ha, so it's a bug in Mastodon somewhere between where it is receiving the AS2 from Sharkey and producing the RSS feed. I'm guessing that Mastodon is failing to (re-)escape the <figcaption> internally, so when it "renders" it, it gets filtered out as an HTML tag not on their allow list of HTML tags
#
aaronpk but in any case it's nothing in my control
#
aaronpk but nothing to do with the RSS conversion either
#
[tantek] right, it's already gone by the time it gets to RSS
#
[tantek] yeah I don't see it in the source or DOM of https://indieweb.social/@matty@blahaj.zone/112728519593498857
#
[KevinMarks] Mastodon has a very short list of allowed html tags. Might be worth an issue to expand them (feedparser has a longer, but still judicious list)
#
[tantek] Except that's not the problem, as the tag used in the original post is intended as an example in prose, not markup
#
aaronpk Right, the problem is it got incorrectly stripped
#
aaronpk tho it did start to try to escape it with the code tag
_fluffy, gRegorLove_, to2ds and [tw2113] joined the channel