2 Guests viewing this page
Hidden 8 yrs ago Post by skidcrow
Raw

skidcrow

Member Seen 7 mos ago

@Grimhildr Yeah, the problem is that since people can embed arbitrary image URLs, those images may be served over cleartext and you get a "mixed content" warning.

My reverse proxy rewrites a lot of URLs from http:// -> https:// using the HTTPS Everywhere database, and it does a good job, but it doesn't get everything since not every server supports ssl.

One solution would be to transform BBCode [IMG] URLs so that they proxy through the Guild.

@The Spectre I want to implement PM/convo deletion soon.


ah, right. thanks for clearing that up. maybe there's a way to make the "images" tab more visible on people's profiles, so then there's less image urls from other sites that remove the security of the page? idk, it's not that major of a deal if i'm honest.

also, looking forward to that pm deletion. and just really loving this huge amount of interaction.
Hidden 8 yrs ago Post by Dion
Raw
Avatar of Dion

Dion THE ONE WHO IS CHEAP HACK ® / THE SHIT, A FART.

Member Seen 11 days ago

One solution would be to transform BBCode [IMG] URLs so that they proxy through the Guild.


What would the drawbacks of that be though? If it has any drawbacks at all it wouldn't be concerning to be at all given that we have a relatively low need for security anyway. I mean we're not taking bank account details or private info here, so eh..
Hidden 8 yrs ago Post by Mahz
Raw
OP
Avatar of Mahz

Mahz ¯\_(ツ)_/¯

Admin Seen 2 mos ago

Yeah, the mixed content issue is pretty low priority across all the things I could burn some dev time on.
Hidden 8 yrs ago Post by LegendBegins
Raw
Avatar of LegendBegins

LegendBegins

Moderator Online

<Snipped quote by Mahz>

What would the drawbacks of that be though? If it has any drawbacks at all it wouldn't be concerning to be at all given that we have a relatively low need for security anyway. I mean we're not taking bank account details or private info here, so eh..


While I agree that it should not be a top priority, security should always be taken into consideration, because it can lead to other issues. If you never implement security, it can lead to holes that cause harvesting of usernames and passwords that may be duplicated on other sites or worse, lead to the Guild itself being compromised. So while this is a small issue now, it is never a good idea to throw security into the bucket of "things to do eventually."
Hidden 8 yrs ago Post by Dion
Raw
Avatar of Dion

Dion THE ONE WHO IS CHEAP HACK ® / THE SHIT, A FART.

Member Seen 11 days ago

@LegendBegins agreed, but if it's as small as images not being secured, I couldn't care less to be honest. Especially if there are drawbacks to securing those.
Hidden 8 yrs ago Post by LegendBegins
Raw
Avatar of LegendBegins

LegendBegins

Moderator Online

@Buddha

I mean to point out that images doesn't necessarily mean only images. One thing can lead to other holes, and while it's unlikely, and I, like you "couldn't care less" in the meantime, it does need to be on the list eventually.
Hidden 8 yrs ago Post by skidcrow
Raw

skidcrow

Member Seen 7 mos ago

@Buddha

I mean to point out that images doesn't necessarily mean only images. One thing can lead to other holes, and while it's unlikely, and I, like you "couldn't care less" in the meantime, it does need to be on the list eventually.


i don't believe buddha is undermining the eventual "severity" of the situation, but instead stating that it's an incredibly minor issue compared to other suggestions raised by guild members, and mahz seems to agree. it doesn't mean it'll never get done per se, just that mahz doesn't need to rush to his feet and fix it right away.
Hidden 8 yrs ago Post by NuttsnBolts
Raw
Avatar of NuttsnBolts

NuttsnBolts

Moderator Seen 14 days ago

Not to throw another thing on the plate, but months ago @Ellri compiled a list of additional tags for the roleplay threads (See here, but also check one of the last few posts that you made with your own thoughts). How difficult would this be to implement and can something be set up so if we need another tag added/edited/removed we can ask @Hank and he can input it into the database through the mod toolkit?
Hidden 8 yrs ago 8 yrs ago Post by Mahz
Raw
OP
Avatar of Mahz

Mahz ¯\_(ツ)_/¯

Admin Seen 2 mos ago

I've got private-convo deletion working on my computer.



@NuttsnBolts I can add tags, but I'm more curious about what the user-interface end game is.

Here's the current tag stack:



I could double the amount of tags there and it'd still be bearable. But there are over 60 tags in Ellri's OP with additional suggestions across the replies.

Seems unwieldy with the current UI, or does it not matter?
2x Like Like
Hidden 8 yrs ago Post by Mao Mao
Raw
Avatar of Mao Mao

Mao Mao Sheriff of Pure Hearts (They/Them)

Member Seen 0-24 hrs ago

One more thing, @Mahz. How about the folder system in the private message? Are you still planning on working on them or scraping the idea?
Hidden 8 yrs ago Post by ML
Raw
Avatar of ML

ML Attempted Polymath

Member Seen 10 mos ago

I've got private-convo deletion working on my computer.



@NuttsnBolts I can add tags, but I'm more curious about what the user-interface end game is.

Here's the current tag stack:



I could double the amount of tags there and it'd still be bearable. But there are over 60 tags in Ellri's OP with additional suggestions across the replies.

Seems unwieldy with the current UI, or does it not matter?


Could you make drop down menus somehow? Select the tag you want, and then have it be added to the list, then rinse and repeat? might take a little while, but it'd keep things neat
1x Like Like
Hidden 8 yrs ago 8 yrs ago Post by Mahz
Raw
OP
Avatar of Mahz

Mahz ¯\_(ツ)_/¯

Admin Seen 2 mos ago

@The Spectre You mean arbitrary, user-created folders?

It would be a cool feature, but I'm not sure how to prioritize it in the scheme of things.

I feel like it creates more value to hit a feature/improvement in each category of the Guild instead of spending my time polishing one specific corner. Since convo-deletion has been one of the most requested features, it might be better to move on to something else once I implement it. Maybe circling back to PMs once I gain progress in other areas.

Other often-requested features:

- Some sort of 18+/Mature support. Like a way to filter it [out].
- GM / Co-GM powers.
- Email notifications.
- Better search. (Also, something is wrong with the search system and only half the forum's posts are indexed)
- Report system.
3x Like Like
Hidden 8 yrs ago Post by NuttsnBolts
Raw
Avatar of NuttsnBolts

NuttsnBolts

Moderator Seen 14 days ago

<Snipped quote by Mahz>

Could you make drop down menus somehow? Select the tag you want, and then have it be added to the list, then rinse and repeat? might take a little while, but it'd keep things neat


Drop down for each category would be nice. I'm guessing it'd be similar to how the folder drop down looks/works in the pm folder. Just means you don't have 60 buttons to look at.
Hidden 8 yrs ago Post by Mao Mao
Raw
Avatar of Mao Mao

Mao Mao Sheriff of Pure Hearts (They/Them)

Member Seen 0-24 hrs ago

@Mahz, I mean this folder system. But that would be a cool idea.
Hidden 8 yrs ago Post by Bluetommy
Raw
Avatar of Bluetommy

Bluetommy Disastrous Enby

Member Seen 2 mos ago

I can't get on the site on chrome without getting an "unsupported protocol" message, it was working fine just last week and works on firefox, what and why?
1x Thank Thank
Hidden 8 yrs ago 8 yrs ago Post by Mahz
Raw
OP
Avatar of Mahz

Mahz ¯\_(ツ)_/¯

Admin Seen 2 mos ago

I can't get on the site on chrome without getting an "unsupported protocol" message, it was working fine just last week and works on firefox, what and why?


What about now? I had to upgrade something.

Not sure if the upgrade goes into effect immediately or after a lil while.
1x Thank Thank
Hidden 8 yrs ago Post by Bluetommy
Raw
Avatar of Bluetommy

Bluetommy Disastrous Enby

Member Seen 2 mos ago

@Mahz works now, thanks your highness.
1x Thank Thank
Hidden 8 yrs ago Post by Lyra
Raw
Avatar of Lyra

Lyra Siven Oleander

Member Seen 8 yrs ago

I love the new updates!

Thank you.
1x Thank Thank
Hidden 8 yrs ago 8 yrs ago Post by Mahz
Raw
OP
Avatar of Mahz

Mahz ¯\_(ツ)_/¯

Admin Seen 2 mos ago

You can now delete convos (it just makes you leave them since a convo can have many participants).

Super experimental.

Edit: Added a "Delete All Trash" button for the poor bastards who moved each PM individually to the Trash folder since there is no mass-move feature.



(Only shows up if you have trash)
8x Like Like
Hidden 8 yrs ago Post by Mao Mao
Raw
Avatar of Mao Mao

Mao Mao Sheriff of Pure Hearts (They/Them)

Member Seen 0-24 hrs ago

@Mahz, it works on my side. I deleted several pages worth of old private messages. Thanks again for making it possible to delete pms! <3
1x Like Like
↑ Top
2 Guests viewing this page
© 2007-2024
BBCode Cheatsheet