Mahz's Dev Journal

[skidcrow]

@Grimhildr Yeah, the problem is that since people can embed arbitrary image URLs, those images may be served over cleartext and you get a "mixed content" warning.

My reverse proxy rewrites a lot of URLs from http:// -> https:// using the HTTPS Everywhere database, and it does a good job, but it doesn't get everything since not every server supports ssl.

One solution would be to transform BBCode [IMG] URLs so that they proxy through the Guild.

@The Spectre I want to implement PM/convo deletion soon.

@Mahz

ah, right. thanks for clearing that up. maybe there's a way to make the "images" tab more visible on people's profiles, so then there's less image urls from other sites that remove the security of the page? idk, it's not that major of a deal if i'm honest.

also, looking forward to that pm deletion. and just really loving this huge amount of interaction.

[Dion]

One solution would be to transform BBCode [IMG] URLs so that they proxy through the Guild.

@Mahz

What would the drawbacks of that be though? If it has any drawbacks at all it wouldn't be concerning to be at all given that we have a relatively low need for security anyway. I mean we're not taking bank account details or private info here, so eh..

[Mahz]

Yeah, the mixed content issue is pretty low priority across all the things I could burn some dev time on.

[LegendBegins]

<Snipped quote by Mahz>

What would the drawbacks of that be though? If it has any drawbacks at all it wouldn't be concerning to be at all given that we have a relatively low need for security anyway. I mean we're not taking bank account details or private info here, so eh..

@Buddha

While I agree that it should not be a top priority, security should always be taken into consideration, because it can lead to other issues. If you never implement security, it can lead to holes that cause harvesting of usernames and passwords that may be duplicated on other sites or worse, lead to the Guild itself being compromised. So while this is a small issue now, it is never a good idea to throw security into the bucket of "things to do eventually."

[Dion]

@LegendBegins agreed, but if it's as small as images not being secured, I couldn't care less to be honest. Especially if there are drawbacks to securing those.

[LegendBegins]

@Buddha

I mean to point out that images doesn't necessarily mean only images. One thing can lead to other holes, and while it's unlikely, and I, like you "couldn't care less" in the meantime, it does need to be on the list eventually.

[skidcrow]

@Buddha

I mean to point out that images doesn't necessarily mean only images. One thing can lead to other holes, and while it's unlikely, and I, like you "couldn't care less" in the meantime, it does need to be on the list eventually.

@LegendBegins

i don't believe buddha is undermining the eventual "severity" of the situation, but instead stating that it's an incredibly minor issue compared to other suggestions raised by guild members, and mahz seems to agree. it doesn't mean it'll never get done per se, just that mahz doesn't need to rush to his feet and fix it right away.

[NuttsnBolts]

Not to throw another thing on the plate, but months ago @Ellri compiled a list of additional tags for the roleplay threads (See here, but also check one of the last few posts that you made with your own thoughts). How difficult would this be to implement and can something be set up so if we need another tag added/edited/removed we can ask @Hank and he can input it into the database through the mod toolkit?

[Mahz]

I've got private-convo deletion working on my computer.



@NuttsnBolts I can add tags, but I'm more curious about what the user-interface end game is.

Here's the current tag stack:



I could double the amount of tags there and it'd still be bearable. But there are over 60 tags in Ellri's OP with additional suggestions across the replies.

Seems unwieldy with the current UI, or does it not matter?

[Mao Mao]

One more thing, @Mahz. How about the folder system in the private message? Are you still planning on working on them or scraping the idea?

[ML]

I've got private-convo deletion working on my computer.



@NuttsnBolts I can add tags, but I'm more curious about what the user-interface end game is.

Here's the current tag stack:



I could double the amount of tags there and it'd still be bearable. But there are over 60 tags in Ellri's OP with additional suggestions across the replies.

Seems unwieldy with the current UI, or does it not matter?

@Mahz

Could you make drop down menus somehow? Select the tag you want, and then have it be added to the list, then rinse and repeat? might take a little while, but it'd keep things neat

[Mahz]

@The Spectre You mean arbitrary, user-created folders?

It would be a cool feature, but I'm not sure how to prioritize it in the scheme of things.

I feel like it creates more value to hit a feature/improvement in each category of the Guild instead of spending my time polishing one specific corner. Since convo-deletion has been one of the most requested features, it might be better to move on to something else once I implement it. Maybe circling back to PMs once I gain progress in other areas.

Other often-requested features:

- Some sort of 18+/Mature support. Like a way to filter it [out].
- GM / Co-GM powers.
- Email notifications.
- Better search. (Also, something is wrong with the search system and only half the forum's posts are indexed)
- Report system.

[NuttsnBolts]

<Snipped quote by Mahz>

Could you make drop down menus somehow? Select the tag you want, and then have it be added to the list, then rinse and repeat? might take a little while, but it'd keep things neat

@Mercenary Lord

Drop down for each category would be nice. I'm guessing it'd be similar to how the folder drop down looks/works in the pm folder. Just means you don't have 60 buttons to look at.

[Mao Mao]

@Mahz, I mean this folder system. But that would be a cool idea.

[Bluetommy]

I can't get on the site on chrome without getting an "unsupported protocol" message, it was working fine just last week and works on firefox, what and why?

[Mahz]

I can't get on the site on chrome without getting an "unsupported protocol" message, it was working fine just last week and works on firefox, what and why?

@bluetommy2

What about now? I had to upgrade something.

Not sure if the upgrade goes into effect immediately or after a lil while.

[Bluetommy]

@Mahz works now, thanks your highness.

[Lyra]

I love the new updates!

Thank you.

[Mahz]

You can now delete convos (it just makes you leave them since a convo can have many participants).

Super experimental.

Edit: Added a "Delete All Trash" button for the poor bastards who moved each PM individually to the Trash folder since there is no mass-move feature.



(Only shows up if you have trash)

[Mao Mao]

@Mahz, it works on my side. I deleted several pages worth of old private messages. Thanks again for making it possible to delete pms! <3