| *** tpb has joined #melange | 00:00 | |
| *** tlarsen|afk has quit IRC | 00:01 | |
| *** dmitrig01 is now known as dmitrig01|afk | 00:31 | |
| *** dmitrig01|afk is now known as dmitrig01 | 01:03 | |
| *** penyaskito has quit IRC | 01:45 | |
| *** SRabbelier has joined #melange | 02:04 | |
| *** ChanServ sets mode: +v SRabbelier | 02:04 | |
| *** dmitrig01 has quit IRC | 02:36 | |
| *** mithro has quit IRC | 04:37 | |
| *** mithro has joined #melange | 05:05 | |
| *** ChanServ sets mode: +v mithro | 05:05 | |
| *** MatthewWilkes has joined #melange | 07:09 | |
| *** madrazr has joined #melange | 09:38 | |
| *** madrazr has left #melange | 10:04 | |
| *** MatthewWilkes is now known as mwilkes|call | 10:25 | |
| *** tlarsen has joined #melange | 10:27 | |
| *** ChanServ sets mode: +o tlarsen | 10:27 | |
| *** madrazr has joined #melange | 10:31 | |
| *** mwilkes|call is now known as MatthewWilkes | 11:35 | |
| *** dmitrig01|afk has joined #melange | 12:43 | |
| *** ChanServ sets mode: +v dmitrig01|afk | 12:43 | |
| *** lisppaste9 has quit IRC | 12:52 | |
| *** r0bby has quit IRC | 12:52 | |
| *** lisppaste9 has joined #melange | 12:54 | |
| lh | for those about to join the melange bi-weeky call, we'll use the same dial-in number we always do | 12:56 |
|---|---|---|
| lh | will send it to you via email | 12:56 |
| *** Lennie has joined #melange | 12:58 | |
| *** ChanServ sets mode: +v Lennie | 12:58 | |
| Lennie | ello | 12:59 |
| MatthewWilkes | moin Lennie | 12:59 |
| *** solydzajs has joined #melange | 13:01 | |
| *** ChanServ sets mode: +o solydzajs | 13:01 | |
| * Lennie shreds solydzajs with a chainsaw | 13:03 | |
| Lennie | solydzajs | 13:03 |
| Lennie | on your way? | 13:03 |
| tlarsen | lh: it wasn't on my calendar. Should I call in? | 13:05 |
| *** dmitrig01|afk is now known as dmitrig01 | 13:14 | |
| *** scorche has quit IRC | 13:21 | |
| *** scorche has joined #melange | 13:22 | |
| *** MatthewWilkes has quit IRC | 13:39 | |
| Lennie | that went well for a change :P | 13:45 |
| tlarsen | I guess I won't work on the Document import feature in my spare time, since it doesn't seem important. | 13:45 |
| Lennie | it is important, but not within the timeframe we have ^^ | 13:46 |
| tlarsen | I was just going to create a view that didn't run TinyMCE. | 13:46 |
| tlarsen | Lennie: well, I wasn't planning on working on anything else, just what interested me. | 13:46 |
| Lennie | hmm | 13:46 |
| tlarsen | Lennie: (and doing Google's releases) | 13:46 |
| Lennie | does TinyMCE support adding raw html? | 13:46 |
| Lennie | like does it have a button that can do that | 13:46 |
| tlarsen | Lennie: I don't think so. | 13:46 |
| tlarsen | I was just going to create a view with a regular (non-TinyMCE) textarea. | 13:47 |
| tlarsen | (and call it "Import") | 13:47 |
| Lennie | haha | 13:47 |
| Lennie | nopoo | 13:47 |
| Lennie | noo | 13:47 |
| Lennie | go to melange-demo :D | 13:47 |
| Lennie | do user | 13:47 |
| Lennie | create document | 13:47 |
| Lennie | and hit the HTML buttoN ^^ | 13:47 |
| Lennie | and see if it works with your exported stuff :D | 13:47 |
| tlarsen | Ah, nice. | 13:48 |
| tlarsen | There are a lot more TinyMCE buttons enabled than before. | 13:48 |
| Lennie | yosh | 13:48 |
| tlarsen | Lennie: How do we defend against XSS? | 13:48 |
| Lennie | on request of Leslie | 13:48 |
| Lennie | I have no idea what they've built-in to TinyMCE to protect that | 13:48 |
| Lennie | instead of implementing import you can try and find out if it withstands XSS | 13:49 |
| Lennie | if so | 13:49 |
| Lennie | you are done :) | 13:49 |
| tlarsen | The way I prevent XSS in Google Python web apps is to use a feedparser whitelist of tags. | 13:49 |
| tlarsen | feedparser is *very* good, even filtering obscurely escaped stuff and the like. | 13:50 |
| Lennie | put it in the document field cleaner function? | 13:50 |
| tlarsen | Lennie: Looks like Pawel is already working on it: http://code.google.com/p/soc/issues/detail?id=78 | 13:51 |
| tpb | <http://ln-s.net/2ssy> (at code.google.com) | 13:51 |
| Lennie | old | 13:52 |
| Lennie | you can take the task from him, I'm sure he wont mind | 13:52 |
| Lennie | it was never assigned to him directly anyway | 13:52 |
| Lennie | oh it was | 13:52 |
| Lennie | by you :P | 13:52 |
| Lennie | oct 15th 2008 | 13:53 |
| tlarsen | Because he asked me to. | 13:53 |
| Lennie | can you just try a piece of script in the HTML box? | 13:54 |
| Lennie | and see if it fails | 13:54 |
| Lennie | if so we can bump the priority | 13:54 |
| Lennie | and fix it | 13:54 |
| Lennie | hmm | 13:55 |
| Lennie | <script type="text/javascript"><!-- | 13:55 |
| Lennie | fasdasdfsadf | 13:55 |
| Lennie | // --></script> | 13:55 |
| Lennie | is what it become | 13:55 |
| Lennie | becomes | 13:55 |
| Lennie | seems like it comments out whatever is inside? | 13:56 |
| *** penyaskito has joined #melange | 14:04 | |
| solydzajs | tlarsen: TinyMCE has built in XSS protection on client side | 14:08 |
| solydzajs | tlarsen: question is whether we want to add additional check on server side ? | 14:08 |
| *** madrazr has left #melange | 14:09 | |
| solydzajs | Lennie: yep but it's only client side | 14:12 |
| Lennie | add a clean for the document form and be done with it :) | 14:12 |
| solydzajs | Lennie: I'm wondering whether do it on server side | 14:12 |
| Lennie | you'll have too | 14:13 |
| Lennie | post attacks? | 14:13 |
| Lennie | *to | 14:13 |
| tlarsen | SRabbelier: If you remove the Export button funtionality, I will commit it back. | 14:17 |
| SRabbelier | tlarsen: tally ho | 14:17 |
| tlarsen | SRabbelier: Please don't remove stuff that is working. | 14:17 |
| SRabbelier | tlarsen: it's a duplicate :) | 14:18 |
| tlarsen | SRabbelier: I merely closed the bug to make it clear that we don't need to implement the Import feature for now. | 14:18 |
| tlarsen | SRabbelier: Ummm, no it *isn't*. | 14:18 |
| tlarsen | SRabbelier: Unless you enjoy six pain-in-the-ass steps instead of a single click. | 14:18 |
| tlarsen | SRabbelier: See my reply in the issue tracker. | 14:18 |
| SRabbelier | kk | 14:19 |
| Lennie | export is still in :S | 14:20 |
| Lennie | todd | 14:21 |
| Lennie | can you make the export button return a html file | 14:21 |
| Lennie | instead of something without extension? | 14:21 |
| SRabbelier | Lennie: maybe .txt? | 14:22 |
| SRabbelier | Lennie: since for most users .html files will open in their browser | 14:22 |
| SRabbelier | Lennie: which is probalby not the desired behavior | 14:22 |
| tlarsen | Lennie: Yeah, it is set to text/ascii on purpose, so the browser will download ti. | 14:23 |
| tlarsen | Err, "it". | 14:23 |
| tlarsen | I hacked that together, which is why it doesn't suggest a better filename. | 14:23 |
| tlarsen | But, it *does* work. | 14:23 |
| tlarsen | SRabbelier: You could still make the filename end in .html. | 14:24 |
| Lennie | you can force it to be downloaded anyway | 14:24 |
| Lennie | depending on the mimetype :P | 14:24 |
| tlarsen | SRabbelier: The browser won't display it if the MIME type is text/ascii. | 14:24 |
| Lennie | idd | 14:24 |
| SRabbelier | tlarsen: but won't windows open it in your browser by default if it ends in .html? | 14:24 |
| SRabbelier | like, if you save it to your desktop, and then click it? | 14:25 |
| tlarsen | If it is saved as a file and you click on it, yes. | 14:25 |
| Lennie | (he's got a point :D) | 14:25 |
| tlarsen | SRabbelier: The browser won't if the HTTP Content-Type is text/ascii. | 14:25 |
| SRabbelier | if we're babbling about ease of use, it would go from having to right-click the file and do 'open with', which might take up to a minute to open on your regular windows box... to just clicking it | 14:25 |
| tlarsen | So, it will get downloaded the first time, because the server tells the browser it is text/ascii. | 14:26 |
| durin42 | tlarsen: ISTR some browsers show text/ascii, not download | 14:26 |
| durin42 | but I could be wrong. | 14:26 |
| tlarsen | SRabbelier: I already think the Import stuff sucks. See: http://code.google.com/p/soc/issues/detail?id=191 | 14:26 |
| tpb | <http://ln-s.net/2ste> (at code.google.com) | 14:26 |
| SRabbelier | tlarsen: feel free to implement :) | 14:26 |
| tlarsen | durin42: Sure, but when you save it, it will be text (not one of those funky HTML with images folder monstrosities). | 14:26 |
| tlarsen | SRabbelier: I am not implementing any Melange features for the time being. | 14:27 |
| SRabbelier | tlarsen: ok, then dont' expect it to be fixed anytime soon :) | 14:27 |
| tlarsen | SRabbelier: its Priority and Milestone are suitably low for now. | 14:27 |
| Lennie | yeah | 14:27 |
| tlarsen | SRabbelier: Ummm, I'm not. | 14:27 |
| SRabbelier | unless some new contributor picks it up | 14:27 |
| Lennie | ^^ | 14:27 |
| SRabbelier | tlarsen: good :) | 14:27 |
| tlarsen | SRabbelier: The issue tracker is to keep a record of things to get done (even eventually), and for other new contributors to get ideas on what they would like to work on. | 14:27 |
| tlarsen | SRabbelier: This is open source, you can't force people to create a patch for the thing *you* want fixed. | 14:28 |
| SRabbelier | tlarsen: oh, sure, it _should_ go in the issue tracker :) | 14:28 |
| Lennie | it's already in the issue tracker | 14:28 |
| tlarsen | SRabbelier: So, I err on the side of documenting everything to give future contributors ideas. | 14:28 |
| Lennie | he posted the link :P | 14:28 |
| SRabbelier | Lennie: I know... -_-" | 14:28 |
| tlarsen | SRabbelier: So, I'd really, *really* appreciate it if you'd stop with the trite "you are welcome to implement it" crap every time I have an idea to make the app better. | 14:29 |
| SRabbelier | Lennie: in English you can say "It should" even if referring to something that already happened :P | 14:29 |
| tlarsen | SRabbelier: I don't have time to code on Melange right now. | 14:29 |
| tlarsen | SRabbelier: So, keeping the issue tracker up-to-date is the best I can do for the moment. | 14:29 |
| SRabbelier | tlarsen: I will try | 14:29 |
| SRabbelier | tlarsen: I apologise | 14:29 |
| tlarsen | SRabbelier: Thanks. I'm sorry for getting annoyed. | 14:29 |
| Lennie | we are all annoyed, deadlines ftw :D | 14:30 |
| SRabbelier | :) | 14:30 |
| SRabbelier | yeah, I agree | 14:30 |
| Lennie | anyhow | 14:30 |
| Lennie | Chris the babarian was happy | 14:30 |
| tlarsen | I would like to mentor a GSoC student for Melange. I will have more time this summer (house will be done, something I'm working on within Google will be farther along and running in production). | 14:30 |
| Lennie | lets keep it that way :p | 14:30 |
| tlarsen | The crew is hanging the drywall currently, since we finally passed the rough framing inspection. They expect to be done hanging tomorrow. | 14:31 |
| tlarsen | The drywall finishing crew starts on Monday. | 14:31 |
| SRabbelier | tlarsen: what's left to be done after the drywall? | 14:31 |
| Lennie | they have different crews for that :P? | 14:31 |
| SRabbelier | Lennie: they have different crews to screw lightbulbs out and to put the new one int! :P | 14:32 |
| SRabbelier | Lennie: separation of responsibilities! :D | 14:32 |
| Lennie | SRabbelier: you mean their brain can't handly the complete replacement process? | 14:32 |
| SRabbelier | Lennie: well... that's another way of putting it :P | 14:32 |
| tlarsen | Lennie: The drywall "guy" subs out the hanging and then comes in and does the finishing himself. | 14:33 |
| tlarsen | SRabbelier: painting, trim work, having the kitchen cabinets installed (they are already on-site). | 14:33 |
| Lennie | tlarsen: k | 14:33 |
| tlarsen | SRabbelier: final electrical, HVAC, and plumbing work | 14:33 |
| Lennie | tlarsen: looks like it is finally getting along? | 14:33 |
| SRabbelier | solydzajs: can you add http://feedparser.googlecode.com/svn/trunk/ as a thirdpary? | 14:33 |
| tpb | Title: feedparser - Revision 291: /trunk (at feedparser.googlecode.com) | 14:33 |
| Lennie | tlarsen: oo plubming and electrical, you're not done yet :D | 14:33 |
| SRabbelier | **thirdparty | 14:33 |
| SRabbelier | tlarsen: so it should soon be at least 'livable'? | 14:33 |
| SRabbelier | **liveable | 14:34 |
| *** solydzajs has quit IRC | 14:34 | |
| Lennie | crashing pawel hurray | 14:34 |
| SRabbelier | I think I scared him off :P | 14:34 |
| Lennie | I'll be back in 30 | 14:37 |
| *** Lennie is now known as Lennie|Gone | 14:37 | |
| *** solydzajs has joined #melange | 14:40 | |
| *** ChanServ sets mode: +o solydzajs | 14:40 | |
| *** lh has quit IRC | 14:46 | |
| *** solydzajs has quit IRC | 14:50 | |
| *** tlarsen is now known as tlarsen|afk | 14:52 | |
| *** Lennie|Gone is now known as Lennie | 15:08 | |
| SRabbelier | tlarsen|afk: ping? | 15:26 |
| *** tlarsen|afk is now known as tlarsen | 15:33 | |
| tlarsen | SRabbelier: Yes? | 15:33 |
| SRabbelier | tlarsen: can you see if the issue is addressed? | 15:33 |
| SRabbelier | tlarsen: oh, that was fast | 15:33 |
| SRabbelier | lol | 15:33 |
| tlarsen | SRabbelier: what issue? | 15:34 |
| SRabbelier | tlarsen: the one you just patched on top of | 15:34 |
| SRabbelier | I thought we agreed we want .txt even for documents, for ease of opening? | 15:34 |
| tlarsen | SRabbelier: you are welcome to change it. | 15:34 |
| SRabbelier | tlarsen: oh... I see now, my commit didn't even go through | 15:34 |
| tlarsen | SRabbelier: I did it that way as an example of the difference between Model-specific extensions and DEF_EXPORT_EXTENSION. | 15:34 |
| SRabbelier | tlarsen: you should put the default export in params instead | 15:35 |
| SRabbelier | params.py that is | 15:35 |
| tlarsen | OK, feel free to fix it the right way. :) | 15:35 |
| SRabbelier | will do :) | 15:35 |
| tlarsen | (sound familiar? :) | 15:35 |
| * tlarsen is teasing SRabbelier | 15:36 | |
| SRabbelier | tlarsen: I don't mind :) | 15:36 |
| *** tlarsen is now known as tlarsen|afk | 15:37 | |
| Lennie | tlarsen|afk | 16:00 |
| Lennie | next time you commit something about an issue you can just put Issue <issuenr> there instead of the complete link | 16:00 |
| Lennie | just like r1932 is automatically parsed it also does that for issues | 16:00 |
| Lennie | unless ofcrouse you explicitly want to add the link to the issue, which is fine :P | 16:00 |
| *** penyaskito_ has joined #melange | 16:10 | |
| *** penyaskito has quit IRC | 16:28 | |
| *** tlarsen|afk is now known as tlarsen | 16:39 | |
| tlarsen | Lennie: I had the link handy from an open browser tab. I wasn't sure of the syntax in the comment that would auto-magically be linked. | 16:40 |
| Lennie | :) | 16:40 |
| *** tlarsen is now known as tlarsen|afk | 16:51 | |
| *** N4L|Lennie has joined #melange | 17:04 | |
| *** Lennie has quit IRC | 17:04 | |
| *** N4L|Lennie has quit IRC | 18:05 | |
| *** SRabbelier has quit IRC | 18:33 | |
| *** mithro has quit IRC | 18:50 | |
| *** sandy|lurk has quit IRC | 19:00 | |
| *** sandy|lurk has joined #melange | 19:00 | |
| *** MatthewWilkes has joined #melange | 19:02 | |
| *** tlarsen|afk has left #melange | 19:05 | |
| *** MatthewWilkes has quit IRC | 19:22 | |
| *** tansell-laptop has joined #melange | 19:49 | |
| *** dmitrig01 has quit IRC | 20:22 | |
| *** dmitrig01|afk has joined #melange | 20:22 | |
| *** ChanServ sets mode: +v dmitrig01|afk | 20:22 | |
| *** tansell_laptop has joined #melange | 21:17 | |
| *** dmitrig01|afk has quit IRC | 21:17 | |
| *** tansell-laptop has quit IRC | 21:34 | |
| *** tansell__laptop has joined #melange | 22:16 | |
| *** tansell_laptop has quit IRC | 22:19 | |
| *** r0bby has joined #melange | 22:27 | |
| *** r0bby has quit IRC | 22:34 | |
| *** r0bby has joined #melange | 22:57 | |
| *** tansell_laptop has joined #melange | 23:00 | |
| *** tansell__laptop has quit IRC | 23:00 | |
| *** dmitrig01|afk has joined #melange | 23:15 | |
| *** ChanServ sets mode: +v dmitrig01|afk | 23:15 | |
| *** tansell__laptop has joined #melange | 23:21 | |
| *** tansell_laptop has quit IRC | 23:21 | |
| *** dmitrig01|afk has quit IRC | 23:21 | |
| *** dmitrig01|afk has joined #melange | 23:51 | |
| *** ChanServ sets mode: +v dmitrig01|afk | 23:51 | |
| *** dmitrig01|afk has quit IRC | 23:53 | |
| *** mithro has joined #melange | 23:58 | |
| *** ChanServ sets mode: +v mithro | 23:58 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!