Perl 6 - the future is here, just unevenly distributed

IRC log for #metacpan, 2014-10-17

| Channels | #metacpan index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
00:25 vroom joined #metacpan
00:58 kentnl lol
00:58 kentnl Hover over a title: https://metacpan.org/pod/release/THAIRMAN/Carp-Proxy-0.04/lib/Carp/Proxy.pm
00:59 kentnl somehow the whole document is inside an <a>
00:59 dipsy [ Carp::Proxy - Diagnostic delegation - metacpan.org ]
01:05 kentnl https://github.com/CPAN-API/metacpan-web/issues/1396
01:09 Mso150 joined #metacpan
01:09 dipsy [ Somehow whole documents get stuck inside unclosed A tags · Issue #1396 · CPAN-API/metacpan-web · GitHub ]
01:10 haarg https://metacpan.org/source/THAIRMAN/Carp-Proxy-0.04/lib/Carp/Proxy.pm#L1535
01:11 dipsy [ lib/Carp/Proxy.pm - metacpan.org ]
01:14 grantm which brings up another issue ... if #Lnnnn refers to a line that would be hidden because it's in the POD, should the "Show POD" mode default to On
01:17 kentnl haarg: its weird. Somehow though, the html the user provided is getting munged, but its getting munged such that it breaks it more than it already would have
01:18 haarg the html is filtered
01:18 haarg name is not an allowed attribute on <a> elements
01:20 kentnl lolwut. I used firefox to save the html to disk, and firefox cleaned up the html and removed the error in the process.
01:22 klapperl joined #metacpan
01:23 trs all browsers do DOM cleanup nowadays before rendering, and they each do it a little differently.
01:24 trs HTML::Gumbo may be of use to metacpan here.
01:24 kentnl haarg: what would happen if I did,  =for html <div>
01:24 haarg it would probably confuse things some
01:24 kentnl that makes me slightly weary, because that feels like XSS just waiting to happen
01:25 grantm or =for html </div></div> </div> </div> </div>
01:25 haarg you can corrupt the layout of the page, but that's all that would happen
01:25 kentnl what about partial tags like =for html <div
01:26 haarg not sure.  it's filtered through a proper html parser
02:05 haarg the html in that module is broken, but i wonder if we should try to handle it anyway
02:06 haarg actually, we are using the xhtml pod converter
02:06 haarg but including the output in an html page
02:48 metacpan joined #metacpan
02:48 metacpan [metacpan-web] oalders created oalders/html-restrict (+1 new commit): http://git.io/O7RaOg
02:48 metacpan metacpan-web/oalders/html-restrict 4f1360d Olaf Alders: Upgrades HTML::Restrict to 2.2.2
02:48 metacpan left #metacpan
02:52 dipsy [ Upgrades HTML::Restrict to 2.2.2 · 4f1360d · CPAN-API/metacpan-web · GitHub ]
03:06 metacpan joined #metacpan
03:06 metacpan [metacpan-web] oalders merged oalders/html-restrict into master: http://git.io/NEpIsA
03:06 metacpan left #metacpan
03:09 dipsy [ Comparing 7113a4a61eb6...4f1360d69950 · CPAN-API/metacpan-web · GitHub ]
03:53 vroom joined #metacpan
04:20 vroom joined #metacpan
06:12 trs kentnl: there is a class of XSS-style bugs called clickjacking that serve to deceive the user by corrupting the layout in ways that cause the user to click on something else than they think they're clicking on.
06:12 trs s/bugs/attacks/
06:13 trs it is reason for restricting not just badly formed HTML like =for html <a> but also lots of inline styling and certain element types.
06:48 FROGGS joined #metacpan
07:33 Mso150 joined #metacpan
07:40 dp_ joined #metacpan
07:56 bvierra joined #metacpan
07:59 neilb joined #metacpan
08:28 neilb joined #metacpan
10:21 lifeofguenter joined #metacpan
10:39 klapperl_ joined #metacpan
11:24 vroom joined #metacpan
12:14 dp_ joined #metacpan
13:41 vroom joined #metacpan
15:29 ribasushi haarg: this is quite excellent, thanks!
15:29 ribasushi (re /metadata)
15:31 haarg after explaining x_irc a couple times i figured it was silly not to have a proper reference for it
16:23 FROGGS joined #metacpan
16:34 superluser joined #metacpan
16:37 ether did I miss a link?
16:38 ether I can't believe it's Friday. I'm still spiralling in the same madness as on Monday where I reassured myself I only had a few hours to go...
16:38 superluser hi, I'm hoping someone can review my patch for opw
16:39 superluser https://github.com/CPAN-API/cpan-api/pull/345
16:39 oalders ether: https://metacpan.org/about/metadata
16:39 oalders superluser: it's on my list for this evening
16:39 oalders we're just in the process of moving data centres, so i had some other stuff i had to deal with first
16:39 superluser oh cool, sorry to be a pest :)
16:39 dipsy [ Issue340 - MyModule shouldn't be indexed by rose · Pull Request #345 · CPAN-API/cpan-api · GitHub ]
16:39 dipsy [ MetaCPAN Metadata - metacpan.org ]
16:39 oalders oh, don't apologize for reminding me about things :)
16:40 oalders but this _was_ already on my list.  i just had ranguard after me for other things :)
16:40 superluser no worries.  I just realized the deadline was on wednesday and thought I better check in :)
16:41 ether nice metadata writeup
16:42 ether is there something we can say about 'provides' metadata? I'm not sure if metacpan respects that when generating hte list of modules vs. documentation on the main /release page
16:46 oalders probably someone needs to do dig into the web and api code to look at how we handle provides first
16:51 ether yay archaeology :)
16:53 rwstauner if provides is non-empty the api uses it, otherwise we use Module::Metadata to determine it
16:54 rwstauner the "terminology" on the release page is simply {docs => "pod", provides => "code", modules => "both"}
16:54 rwstauner i believe
17:11 Mso150 joined #metacpan
17:17 neilb joined #metacpan
17:18 Mso150 joined #metacpan
17:33 Mso150 joined #metacpan
18:56 Mso150 joined #metacpan
19:06 Mso150 joined #metacpan
23:06 superluser joined #metacpan
23:49 Mso150 joined #metacpan

| Channels | #metacpan index | Today | | Search | Google Search | Plain-Text | summary