Bobinas P4G
  • Login
  • Public

    • Public
    • Groups
    • Popular
    • People

Conversation

Notices

  1. Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:42:13 UTC Bob Mottram Bob Mottram
    So here's the idea for having private contact methods available from Qvitter profiles. If xmpp address or GPG public key are available then icons appear and if you click on them then the text gets copied to the clipboard.

    The main problem is that the clipboard copy involves inline javascript, which breaks the content security.

    postActiv https://social.freedombone.net/attachment/20679

    In conversation Monday, 24-Apr-2017 20:42:13 UTC from social.freedombone.net permalink

    Attachments


    1. https://social.freedombone.net/file/e383dfe416f462293af63eff6a6397f1ccb3cfa84f028612c9f1101a90769f0e.jpg
    • Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:51:12 UTC Bob Mottram Bob Mottram
      • Maiyannah Bishop
      @maiyannah the only way I can get clipboard copying to work is to remove unsafe-inline, which allows the inline script to run. Probably not highly recommended because of injection attacks and wotnot.
      In conversation Monday, 24-Apr-2017 20:51:12 UTC permalink
    • Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 20:56:01 UTC Bob Mottram Bob Mottram
      • Maiyannah Bishop
      @maiyannah ok. That might be something I don't use.
      In conversation Monday, 24-Apr-2017 20:56:01 UTC permalink
    • Bob Mottram (bob@social.freedombone.net)'s status on Monday, 24-Apr-2017 21:07:34 UTC Bob Mottram Bob Mottram
      • Maiyannah Bishop
      @maiyannah Checked with and without content security for unsafe-inline, and setting background color seems unaffected.
      In conversation Monday, 24-Apr-2017 21:07:34 UTC permalink

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • Privacy
  • Source
  • Version
  • Contact

Bobinas P4G is a social network. It runs on GNU social, version 2.0.1-beta0, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All Bobinas P4G content and data are available under the Creative Commons Attribution 3.0 license.