#wordpress 2018-10-25

2018-10-25 UTC
gRegorLove and [jgmac1106] joined the channel
#
[jgmac1106] This one is strange.
[chegalabonga] joined the channel
#
[chegalabonga] [pfefferle] How come the pubsubhubbub plugin has been removed from WP plugins? I installed directly from github instead. For the Ostatus plugin dependencies.
[pfefferle] joined the channel
#
[pfefferle] Long story
#
[pfefferle] I am working on the reactivation
#
[pfefferle] It is no security issue
#
[pfefferle] https://wordpress.org/support/topic/why-has-the-plugin-been-removed-from-the-wp-repository/
#
[chegalabonga] ah k cool
#
[chegalabonga] Im using anyway #LifeOnTheEdge
#
[pfefferle] 😆
[Vincent], [tantek], [pfefferle], [jgmac1106] and [Rose] joined the channel
#
GWG Morning
#
Loqi good morning!
[chegalabonga] joined the channel
#
[chegalabonga] morning y'all
#
GWG https://petitions.classicpress.net/
#
GWG Some positive comments on Webmention and Indieauth
#
GWG Hi
#
[jgmac1106] @gwg I didn't know Daniele was heavily involved. I know him very well. He is a Mozilla rep council member, runs the Italian WordPress community. Great person
#
GWG [jgmac1106]: I had a chat with James Nylen as well. The fact they seem to understand the benefits of Indieauth and Webmentions... They state they have a business focused...but their definition of business isn't so much commercial as the name would suggest.
#
[jgmac1106] Yeah we need 38 more votes for mf2 for it to get a vote.
#
GWG [jgmac1106]: A drop in replacement for WordPress where the focus is iterating on features for developers to build even better enhancements and plugins is very tempting.
#
[jgmac1106] Yeah... And their idea of turning a webmention into a native @ mention is great idea. SemPress shows schema.org and mf2 can play nice...
#
GWG But, I'd love to iterate on Indieweb for organizations, even though I'm not an organization.
#
[jgmac1106] But the ignorance shows... My clients need all the additional vocabulary? Really? Who is consuming all the extra markup?
#
GWG Well, the idea I had, which was rejected in WordPress, was functionality for plugins to do this better
#
GWG For example, wordpress has body_class and post_class, which allow you to filter the classes on the post and the body
#
GWG I suggested adding content_class
#
GWG And post, body, and content attribute filters
#
GWG So that a theme could implement them, and a plugin could add the attributes as needed for any arbitrary markup they wanted.
#
GWG https://core.trac.wordpress.org/ticket/32326
[Rose], jgmac1106, [calumryan], [Vincent], [eddie], tantek__, [tantek] and [jgmac1106] joined the channel
#
jgmac1106 [gwg] talking to Danielle, he is leading the project as well I am gonna try and schedule some time with him….but might right a piece on why the IndieWeb makes sense for a SMb owner first
#
jgmac1106 ….if you say that is primary target
tantek__ and doubleloop joined the channel; jgmac1106 left the channel
#
doubleloop GWG, [jgmac1106] : it's not specifically related to the syndication. Ignoring syndication completely - when I post via micropub to WP, special chars are turned into html entities.
#
doubleloop Was just wondering if that's the desired behaviour
#
doubleloop I'll write a note or a GH issue explaining a bit better what I mean - some screenshots will help
#
[jgmac1106] no, of course not, I only mentioned syndication because that is when it happens. I will try to recreate issue and see if it happens to me as well since 3.1.1
#
[jgmac1106] @doublepoop my micropub aint even publishing even though it says its publishing
#
doubleloop [jgmac1106] did you recently upgrade to Micropub 2? Similar happened to me and I needed to reauth as the endpoint has changed
[pfefferle] joined the channel
#
[pfefferle] WebSub is back online https://wordpress.org/plugins/pubsubhubbub/ 😍
#
Loqi [Matthias Pfefferle] Description This plugin is a simple way to let people know in real-time when your blog is updated. PubSubHubbub/WebSub is widely adopted and is used by Google Reader, Google Alerts and many other services. Subscription requests are relayed through...
#
aaronpk do you know what happened?
#
[pfefferle] The email address of the other contributed bounced, so they deactivated the plugin
#
[pfefferle] Contributor
#
aaronpk whoa
#
[pfefferle] He was inactive for quite some years and his mail address expired
#
[pfefferle] They argued with security reasons
doubleloop, [eddie] and [asuh] joined the channel
#
[asuh] Does Micropub require that the Rest API JSON be exposed publicly? I might have to reconsider using this: https://perishablepress.com/disable-wp-rest-api/
jgmac1106 joined the channel
#
GWG It should, as all requests are authenticated, but try it
#
GWG It will mess up WordPress
#
GWG I would ask what specifically you want to disable.
#
[asuh] As described on the plugin page above, I understand these points:
#
[asuh] *The REST API may not be needed for non-logged users
#
[asuh] *Disabling the REST API minimizes potential attack vectors
#
[asuh] *Disabling the REST API prevents content scraping and plagiarism
#
[asuh] *Disabling the REST API conserves server resources
#
[asuh] So it’s a desired mix of security as it is privacy
#
GWG Let's talk about that
#
GWG You don't want to use any of the built in endpoints?
#
[asuh] Not necessarily. What I was more thinking about was the third point: “minimizes potential attack vectors”
#
[asuh] The tough thing here is finding a balance between being public and private/security conscious
#
GWG Disable specific endpoints then
#
[asuh] That would probably be the next best step but is getting into the weeds
#
GWG I might write a plugin for that
#
GWG It's quick enough
#
GWG I don't like certain things
#
[asuh] The intention is to just remove unnecessary objects that could increase attack points. The WP JSON endpoint exposes a lot of things but some don’t seem necessary to be public
[manton] and [eddie] joined the channel
#
GWG Hardening can be done more effectively
[cleverdevil] joined the channel