/irc-logs / freenode / #whatwg / 2010-01-25 / end

Options:

  1. # Session Start: Mon Jan 25 00:00:00 2010
  2. # Session Ident: #whatwg
  3. # [00:06] <AryehGregor> TabAtkins, >>> import urllib
  4. # [00:06] <AryehGregor> >>> urllib.quote("a b")
  5. # [00:06] <AryehGregor> 'a%20b'
  6. # [00:10] <Dashiva> See what happens with < and " too
  7. # [00:12] * Joins: mpilgrim (n=mpilgrim@rrcs-98-101-146-174.midsouth.biz.rr.com)
  8. # [00:12] <mpilgrim> >>> import urllib
  9. # [00:12] <mpilgrim> >>> urllib.quote("a b")
  10. # [00:12] <mpilgrim> 'a%20b'
  11. # [00:12] <mpilgrim> >>> urllib.quote("a/b")
  12. # [00:12] <mpilgrim> 'a/b'
  13. # [00:12] <mpilgrim> >>> urllib.quote("a/b", safe="")
  14. # [00:12] <mpilgrim> 'a%2Fb'
  15. # [00:12] <mpilgrim> >>> urllib.quote_plus("a b")
  16. # [00:12] <mpilgrim> 'a+b'
  17. # [00:13] <mpilgrim> (that's python 2.6.1, for TabAtkins)
  18. # [00:13] * Quits: Utkarsh (n=admin@117.201.80.4) (Read error: 110 (Connection timed out))
  19. # [00:13] <AryehGregor> mpilgrim, . . . were you, like, reading the logs and came on IRC specifically to say that?
  20. # [00:13] <Dashiva> mpilgrim: What about " and <?
  21. # [00:13] <mpilgrim> yes
  22. # [00:14] <mpilgrim> >>> urllib.quote('a"b')
  23. # [00:14] <mpilgrim> 'a%22b'
  24. # [00:14] <mpilgrim> >>> urllib.quote('a<b')
  25. # [00:14] <mpilgrim> 'a%3Cb'
  26. # [00:15] <AryehGregor> Neat, Google Reader suggested an RSS feed that contained a personal attack on me.
  27. # [00:15] <AryehGregor> Never had that happen before.
  28. # [00:15] <TabAtkins> Woo!
  29. # [00:15] <TabAtkins> Thanks, mpilgrim.
  30. # [00:15] <TabAtkins> Is / safe in data urls?
  31. # [00:15] * TabAtkins goes to see if he can find the answer.
  32. # [00:17] * Quits: mpilgrim (n=mpilgrim@rrcs-98-101-146-174.midsouth.biz.rr.com)
  33. # [00:17] * Quits: FireFly (n=firefly@unaffiliated/firefly) ("Leaving")
  34. # [00:18] <Philip`> >>> urllib.quote(u"\u0123")
  35. # [00:18] <Philip`> Traceback (most recent call last):
  36. # [00:18] <Philip`> File "<stdin>", line 1, in <module>
  37. # [00:18] <Philip`> File "/usr/lib64/python2.6/urllib.py", line 1223, in quote
  38. # [00:18] <Philip`> res = map(safe_map.__getitem__, s)
  39. # [00:18] <Philip`> KeyError: u'\u0123'
  40. # [00:18] <Philip`> Guess you need to find a UTF-8 encoding API too
  41. # [00:19] * Joins: boblet (n=boblet@p1072-ipbf36osakakita.osaka.ocn.ne.jp)
  42. # [00:20] <Philip`> (For extra fun, it works fine if you test with u"x" and starts throwing an exception when a user on your site enters non-ASCII data)
  43. # [00:23] * Quits: danbri (n=danbri@unaffiliated/danbri) (Remote closed the connection)
  44. # [00:25] * Joins: Utkarsh (n=admin@117.201.81.12)
  45. # [00:27] * Quits: tametick (n=chatzill@chello084114134061.3.15.vie.surfer.at) (Client Quit)
  46. # [00:27] * Quits: workmad3 (n=workmad3@cpc3-bagu10-0-0-cust651.1-3.cable.virginmedia.com) ("Leaving...")
  47. # [00:38] * Joins: jwalden (n=waldo@c-98-248-40-206.hsd1.ca.comcast.net)
  48. # [00:40] * Joins: nessy (n=Adium@124-171-43-189.dyn.iinet.net.au)
  49. # [00:40] * Quits: salavas (i=salavas@h4n1fls31o279.telia.com) (Read error: 60 (Operation timed out))
  50. # [00:42] * Joins: salavas (i=salavas@h4n1fls31o279.telia.com)
  51. # [00:44] * Quits: _Utkarsh (n=admin@117.201.80.156) (Read error: 110 (Connection timed out))
  52. # [00:47] * Joins: _Utkarsh (n=admin@117.201.81.15)
  53. # [00:48] * Joins: takoratta (n=takoratt@203.39.247.241)
  54. # [00:48] * Quits: kmartiin (n=kmartiin@p57AC7F9A.dip.t-dialin.net) (Remote closed the connection)
  55. # [00:54] * Quits: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net) (Remote closed the connection)
  56. # [00:57] * Quits: Utkarsh (n=admin@117.201.81.12) (Read error: 110 (Connection timed out))
  57. # [00:57] * Quits: _Utkarsh (n=admin@117.201.81.15) (Read error: 60 (Operation timed out))
  58. # [00:57] * Joins: Utkarsh (n=admin@117.201.81.15)
  59. # [01:04] * Quits: ttepasse (n=ttepas--@ip-95-222-120-117.unitymediagroup.de) ("404")
  60. # [01:08] * Quits: svl (n=me@ip565744a7.direct-adsl.nl) ("And back he spurred like a madman, shrieking a curse to the sky.")
  61. # [01:17] * Quits: Utkarsh (n=admin@117.201.81.15) (Read error: 60 (Operation timed out))
  62. # [01:17] * Joins: Utkarsh (n=admin@117.201.81.127)
  63. # [01:24] * Quits: tndH (n=Rob@cpc2-leed18-0-0-cust427.leed.cable.ntl.com) ("ChatZilla 0.9.86-rdmsoft [XULRunner 1.9.0.1/2008072406]")
  64. # [01:40] * Joins: JoePeck (n=JoePeck@cpe-74-65-7-212.rochester.res.rr.com)
  65. # [01:40] * Quits: JoePeck (n=JoePeck@cpe-74-65-7-212.rochester.res.rr.com) (Remote closed the connection)
  66. # [01:43] * Joins: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  67. # [01:48] * Quits: daedb (n=daed@h11n1fls34o986.telia.com) (Remote closed the connection)
  68. # [01:48] * Joins: daedb (n=daed@h11n1fls34o986.telia.com)
  69. # [01:56] * Joins: tkent (n=tkent@220.109.219.244)
  70. # [02:20] * Joins: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp)
  71. # [02:22] * Quits: takoratta (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  72. # [02:33] * Quits: borismus (n=borismus@bl8-148-211.dsl.telepac.pt)
  73. # [02:33] * Quits: gavin_ (n=gavin@firefox/developer/gavin) (Read error: 110 (Connection timed out))
  74. # [02:33] * Joins: cedricv (n=cedric@124.197.106.80)
  75. # [02:33] * Joins: gavin_ (n=gavin@firefox/developer/gavin)
  76. # [02:38] * Joins: danbri (n=danbri@ip176-48-210-87.adsl2.static.versatel.nl)
  77. # [02:47] * Joins: takoratta (n=takoratt@203.39.247.241)
  78. # [02:53] * Joins: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  79. # [02:56] * Quits: danbri (n=danbri@unaffiliated/danbri) (Read error: 113 (No route to host))
  80. # [03:05] * Quits: Utkarsh (n=admin@117.201.81.127) (Read error: 110 (Connection timed out))
  81. # [03:20] <MikeSmith> TabAtkins: you around?
  82. # [03:21] <TabAtkins> MikeSmith: Yo.
  83. # [03:21] <MikeSmith> hey man
  84. # [03:21] <MikeSmith> I saw your message about postings being held
  85. # [03:22] <MikeSmith> that you sent to the a11y list
  86. # [03:22] <TabAtkins> Yeah.
  87. # [03:22] <MikeSmith> to be clear, you mean the public-html-a11y@w3.org list?
  88. # [03:22] <TabAtkins> Yes.
  89. # [03:23] <MikeSmith> so I'm looking at the admin interface for that list but I don't see any messages being held for moderation
  90. # [03:24] <TabAtkins> Hrm.
  91. # [03:25] * Joins: cpearce_ (n=cpearce@203-97-204-82.dsl.clear.net.nz)
  92. # [03:25] <TabAtkins> Frex, I sent one at 16:20 GMT today, in response to the "<summary> element and Issue 32" thread.
  93. # [03:25] * Joins: roc_ (n=roc@203-97-204-82.dsl.clear.net.nz)
  94. # [03:25] <TabAtkins> And got an automated response from public-html-a11y-request@w3.org that my message had been sent to the list maintainer for approval.
  95. # [03:26] <MikeSmith> OK
  96. # [03:27] <MikeSmith> can you please forward that response to me?
  97. # [03:27] <MikeSmith> I'll pass it on to systems team and see if we can figure out what the problem is
  98. # [03:27] <TabAtkins> mikesmith@w3.org?
  99. # [03:27] <MikeSmith> mike@w3.org
  100. # [03:27] * Quits: m_W (n=mwj@c-69-141-106-205.hsd1.nj.comcast.net) (Read error: 104 (Connection reset by peer))
  101. # [03:28] <TabAtkins> done
  102. # [03:28] * Joins: m_W (n=mwj@c-69-141-106-205.hsd1.nj.comcast.net)
  103. # [03:28] * Joins: wakaba_1 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  104. # [03:30] * Joins: wakaba_2 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  105. # [03:35] * Joins: wakaba_3 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  106. # [03:37] * Quits: wakaba_1 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 60 (Operation timed out))
  107. # [03:40] * Quits: Necrathex (n=bleptop@212-123-163-12.ip.telfort.nl) (Remote closed the connection)
  108. # [03:42] * Quits: roc (n=roc@203-97-204-82.dsl.clear.net.nz) (Read error: 110 (Connection timed out))
  109. # [03:42] * roc_ is now known as roc
  110. # [03:47] * Quits: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 113 (No route to host))
  111. # [03:52] * Joins: takoratt_ (n=takoratt@203.39.247.242)
  112. # [03:52] * Quits: cpearce (n=cpearce@203-97-204-82.dsl.clear.net.nz) (Read error: 110 (Connection timed out))
  113. # [03:53] * Joins: takorat__ (n=takoratt@203.39.247.241)
  114. # [03:53] * Quits: wakaba_2 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 113 (No route to host))
  115. # [03:57] * Joins: miketaylr (n=miketayl@24.42.95.234)
  116. # [03:59] * Quits: takoratta (n=takoratt@203.39.247.241) (Read error: 60 (Operation timed out))
  117. # [04:00] * Quits: takoratt_ (n=takoratt@203.39.247.242) (Read error: 60 (Operation timed out))
  118. # [04:01] * Joins: yutak (n=yutak@220.109.219.244)
  119. # [04:07] * Joins: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  120. # [04:09] * Joins: wakaba_1 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  121. # [04:11] * Joins: wakaba_2 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  122. # [04:15] * Quits: cedricv (n=cedric@124.197.106.80) (Read error: 104 (Connection reset by peer))
  123. # [04:25] * Quits: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp) ("Tomorrow to fresh woods, and pastures new.")
  124. # [04:26] * Joins: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp)
  125. # [04:27] * Quits: wakaba_3 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 113 (No route to host))
  126. # [04:29] * Quits: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 110 (Connection timed out))
  127. # [04:29] * Joins: JonathanNeal (n=Jonathan@adsl-99-56-193-35.dsl.lsan03.sbcglobal.net)
  128. # [04:29] * Quits: wakaba_1 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 110 (Connection timed out))
  129. # [04:31] * Quits: mackstann (n=death@216-20-152-177-dsl.hevanet.com) (Read error: 110 (Connection timed out))
  130. # [04:32] * Joins: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  131. # [04:46] * Quits: erikvold (n=erikvold@S01060024012860e9.gv.shawcable.net) ("Bye bye")
  132. # [04:50] * Quits: wakaba_2 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 113 (No route to host))
  133. # [04:51] * Quits: m_W (n=mwj@c-69-141-106-205.hsd1.nj.comcast.net) (Client Quit)
  134. # [04:53] * Joins: erikvold (n=erikvold@S01060024012860e9.gv.shawcable.net)
  135. # [04:58] * Quits: bzed (n=bzed@devel.recluse.de) (Read error: 54 (Connection reset by peer))
  136. # [04:59] * Joins: inimino1 (n=inimino@atekomi.inimino.org)
  137. # [04:59] * Quits: inimino1 (n=inimino@atekomi.inimino.org) (Remote closed the connection)
  138. # [05:00] * Joins: mackstann (n=death@216-20-152-177-dsl.hevanet.com)
  139. # [05:03] * Quits: cpearce_ (n=cpearce@203-97-204-82.dsl.clear.net.nz) (Read error: 110 (Connection timed out))
  140. # [05:04] * Quits: roc (n=roc@203-97-204-82.dsl.clear.net.nz) (Read error: 110 (Connection timed out))
  141. # [05:11] * Quits: boblet (n=boblet@p1072-ipbf36osakakita.osaka.ocn.ne.jp) ("thxbye")
  142. # [05:11] * Joins: bzed (n=bzed@devel.recluse.de)
  143. # [05:22] * Quits: JonathanNeal (n=Jonathan@adsl-99-56-193-35.dsl.lsan03.sbcglobal.net) (Read error: 110 (Connection timed out))
  144. # [05:30] * Joins: takoratta (n=takoratt@203.39.247.241)
  145. # [05:34] * Quits: KevinMarks (n=KevinMar@c-67-161-44-219.hsd1.ca.comcast.net) (Client Quit)
  146. # [05:46] * Quits: takorat__ (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  147. # [06:00] * Quits: gavin_ (n=gavin@firefox/developer/gavin) (Read error: 110 (Connection timed out))
  148. # [06:01] * Joins: gavin_ (n=gavin@firefox/developer/gavin)
  149. # [06:04] * Joins: jorlow_ (n=jorlow@216.239.45.130)
  150. # [06:04] * Joins: takoratt_ (n=takoratt@203.39.247.241)
  151. # [06:07] * Joins: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz)
  152. # [06:07] * Quits: breakmau5 (n=breakz@erft-5d80b812.pool.mediaWays.net) (Read error: 113 (No route to host))
  153. # [06:09] * Joins: wakaba_1 (n=wakaba_@119-228-219-41.eonet.ne.jp)
  154. # [06:14] * Quits: Amorphous (i=jan@unaffiliated/amorphous) (Read error: 113 (No route to host))
  155. # [06:17] * Joins: Amorphous (i=jan@unaffiliated/amorphous)
  156. # [06:20] * Quits: takoratta (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  157. # [06:24] * Quits: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  158. # [06:24] * Quits: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp) (Read error: 110 (Connection timed out))
  159. # [07:07] * Joins: pham_ (i=foobar@174-21-104-229.tukw.qwest.net)
  160. # [07:11] * Joins: JonathanNeal (n=Jonathan@adsl-99-56-193-35.dsl.lsan03.sbcglobal.net)
  161. # [07:13] * Joins: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net)
  162. # [07:18] * Quits: pham (i=foobar@97-126-29-66.tukw.qwest.net) (Read error: 113 (No route to host))
  163. # [07:25] * Quits: TabAtkins (n=chatzill@70-139-15-246.lightspeed.rsbgtx.sbcglobal.net) (Read error: 110 (Connection timed out))
  164. # [07:43] * Quits: takkaria (n=takkaria@isparp.co.uk) (Read error: 60 (Operation timed out))
  165. # [07:43] * Joins: takkaria (n=takkaria@isparp.co.uk)
  166. # [07:52] * Joins: takoratta (n=takoratt@203.39.247.241)
  167. # [07:58] * Quits: miketaylr (n=miketayl@24.42.95.234) (Remote closed the connection)
  168. # [08:01] * Joins: paul_iri_ (n=paul_iri@32.153.167.26)
  169. # [08:05] * Joins: maikmerten (n=merten@ls5dhcp196.cs.uni-dortmund.de)
  170. # [08:05] * Joins: jorlow__ (n=jorlow@c-67-164-97-172.hsd1.ca.comcast.net)
  171. # [08:05] * Joins: FireFly (n=firefly@unaffiliated/firefly)
  172. # [08:08] * Quits: takoratt_ (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  173. # [08:18] * Quits: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net) (Read error: 113 (No route to host))
  174. # [08:21] * Joins: takoratt_ (n=takoratt@203.39.247.241)
  175. # [08:23] * Quits: jorlow_ (n=jorlow@216.239.45.130) (Read error: 110 (Connection timed out))
  176. # [08:36] * Joins: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  177. # [08:40] * Quits: takoratta (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  178. # [08:42] * Joins: Maurice (n=ano@a80-101-46-164.adsl.xs4all.nl)
  179. # [08:48] * Quits: takoratt_ (n=takoratt@203.39.247.241) (Read error: 110 (Connection timed out))
  180. # [08:50] * Quits: FireFly (n=firefly@unaffiliated/firefly) ("Leaving")
  181. # [08:51] * Quits: jwalden (n=waldo@c-98-248-40-206.hsd1.ca.comcast.net) ("ChatZilla 0.9.85-rdmsoft [XULRunner 1.9.1.6/20100107113701]")
  182. # [08:58] <hsivonen> Hixie: did you fix about:blank on Friday?
  183. # [08:59] <hsivonen> Dashiva: H.264 authoring for Flash is equally tollboothed and freedom-deprived as H.264 authoring for HTML5, so Flash is not free for a child in $COUNTRY in that sense
  184. # [09:02] <Hixie> not yet
  185. # [09:08] * Joins: KevinMarks (n=KevinMar@c-67-161-44-219.hsd1.ca.comcast.net)
  186. # [09:11] * Joins: pesla (n=retep@procurios.xs4all.nl)
  187. # [09:13] * Joins: mhausenblas (n=mhausenb@wg1-nat.fwgal01.deri.ie)
  188. # [09:16] * Quits: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  189. # [09:16] * Quits: smaug (n=chatzill@cs181150024.pp.htv.fi) (Remote closed the connection)
  190. # [09:17] * Joins: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  191. # [09:20] <MikeSmith> Hixie: minor editorial nit - you have '<strong class="impl">Authoring requirements</strong>: ' at the beginning of the paragraph about the value attribute on the meter element
  192. # [09:21] <MikeSmith> with the colon outside the strong element
  193. # [09:21] <MikeSmith> so when I flip to the author view that colon still shows up
  194. # [09:21] <MikeSmith> seems like the colon needs to be inside the strong element
  195. # [09:23] <Dashiva> hsivonen: But surely it's better to depend only on h264, and not both h264 and flash
  196. # [09:26] <MikeSmith> hsivonen: is the term "tollbooth" in this context in wide use? I noticed Mike Shaver used it in a blog posting and you used it elsewhere recently also, but I can't recall seeing it before
  197. # [09:26] <MikeSmith> or maybe I just don't read enough
  198. # [09:27] <Dashiva> I've seen it, although only for cases where you have to actually pay. Not free as in free.
  199. # [09:27] <Dashiva> *as in beer
  200. # [09:27] <Hixie> MikeSmith: oh i thought i'd fixed those. Can you file a bug?
  201. # [09:28] <MikeSmith> Hixie: I find only one that one instance of it so far, but yeah, I will file a bug for it
  202. # [09:28] <hsivonen> MikeSmith: I think "tollbooth" has been used before shaver used it, but I don't have references.
  203. # [09:28] <MikeSmith> OK
  204. # [09:28] <MikeSmith> i
  205. # [09:28] <MikeSmith> oops
  206. # [09:29] <MikeSmith> anyway, it's a good term
  207. # [09:29] * Joins: roc (n=roc@121-74-157-214.telstraclear.net)
  208. # [09:29] <Hixie> MikeSmith: thanks
  209. # [09:29] <hsivonen> Dashiva: it's not like you could now use Google properties without a Flash dependency
  210. # [09:30] * Joins: cedricv (n=cedric@116.197.224.246)
  211. # [09:30] * Joins: smaug_ (n=chatzill@cs181150024.pp.htv.fi)
  212. # [09:32] <Dashiva> Google is changing, that's where all the fuss comes from.
  213. # [09:33] * Quits: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp) ("Tomorrow to fresh woods, and pastures new.")
  214. # [09:34] * Joins: erlehmann (n=erlehman@82.113.121.109)
  215. # [09:37] * Joins: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp)
  216. # [09:41] * Joins: danbri (n=danbri@ip176-48-210-87.adsl2.static.versatel.nl)
  217. # [09:45] * Joins: borismus (n=borismus@bl8-148-211.dsl.telepac.pt)
  218. # [09:45] * jgraham notes tht WebKit and Gecko support literal # in data urls
  219. # [09:52] <Dashiva> So fragments are impossible?
  220. # [09:53] <roc> the lack of fragment support in data: URIs is a real pain
  221. # [09:54] * Quits: gavin_ (n=gavin@firefox/developer/gavin) (Read error: 110 (Connection timed out))
  222. # [09:55] * Joins: gavin_ (n=gavin@firefox/developer/gavin)
  223. # [09:58] <jgraham> roc: How did it end up like that?
  224. # [09:58] <roc> I'm not sure, but I think it was an accident
  225. # [09:58] <jgraham> Ah
  226. # [09:58] <roc> because fragments were defined by HTTP
  227. # [09:58] <roc> data: URLs are not HTTP
  228. # [09:58] <roc> QED
  229. # [10:00] * jgraham assumes the theoretical architecture where there is one and only one uri parsing function does not quite see eye-to-eye with reality
  230. # [10:00] <Dashiva> And the people who designed data: didn't bother to make them compatible with the best protocol ever(tm)
  231. # [10:01] * Joins: kmartiin (n=kmartiin@dslb-094-223-200-071.pools.arcor-ip.net)
  232. # [10:03] * Joins: smaug (n=chatzill@cs181150024.pp.htv.fi)
  233. # [10:07] * Quits: jorlow__ (n=jorlow@c-67-164-97-172.hsd1.ca.comcast.net)
  234. # [10:10] <hsivonen> Hixie: is a second <html> tag with an offline manifest meant to take effect?
  235. # [10:13] <roc> jgraham: in fact, I believe in the theoretical architecture, each scheme determines how the rest of the URI is parsed
  236. # [10:15] <hsivonen> roc: it seems useful to have a class of URIs whose parsing is http-like (https, ftp, etc.). too bad you can't tell from an unknown scheme if the scheme is in that class
  237. # [10:15] <roc> yeah
  238. # [10:28] * Joins: tametick (n=chatzill@chello084114134061.3.15.vie.surfer.at)
  239. # [10:32] * Joins: ROBOd (n=robod@89.122.216.38)
  240. # [10:33] <Hixie> hsivonen: in text/html?
  241. # [10:33] * Joins: mat_t (n=mattomas@91.189.88.12)
  242. # [10:33] <Hixie> hsivonen: is the spec ambiguous?
  243. # [10:35] * Quits: MikeSmith (n=MikeSmit@tea12.w3.mag.keio.ac.jp) ("Tomorrow to fresh woods, and pastures new.")
  244. # [10:35] * Joins: GarethAdams|Work (n=GarethAd@pdpc/supporter/active/GarethAdams)
  245. # [10:35] <hsivonen> Hixie: well, it's not ambiguous, but I'm not 100% sure that what I read is what was intended
  246. # [10:35] <hsivonen> Hixie: currently the spec supports what I want to read
  247. # [10:36] <hsivonen> i.e. only the first <html> processes the cache manifest
  248. # [10:44] * Quits: mackstann (n=death@216-20-152-177-dsl.hevanet.com) (Read error: 113 (No route to host))
  249. # [10:49] <Hixie> that is intended
  250. # [10:50] <hsivonen> Hixie: thanks
  251. # [10:51] * Parts: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  252. # [10:51] * Joins: MikeSmith (n=MikeSmit@EM114-48-207-45.pool.e-mobile.ne.jp)
  253. # [10:51] <MikeSmith> gsnedders: a you aware of any known issues with the "--filter" option in anolis?
  254. # [10:52] <MikeSmith> I'm finding at least one case where it doesn't seem to be working as expected
  255. # [10:52] <MikeSmith> it removes an element as expected but leaves behind the text content of that element
  256. # [10:53] <MikeSmith> actually, it seems to be removing the text node that *follows* the element whose contents it should be removing
  257. # [10:54] <MikeSmith> the specific case is this:
  258. # [10:54] <MikeSmith> <strong class="impl">Authoring requirements</strong>: The <code>...
  259. # [10:54] <MikeSmith> that results in :
  260. # [10:55] <MikeSmith> Authoring requirements<code>...
  261. # [10:55] * Joins: adactio (n=adactio@host213-123-197-180.in-addr.btopenworld.com)
  262. # [10:58] <gsnedders> MikeSmith: --filter? jgraham wrote that.
  263. # [11:05] <Philip`> Hooray for lxml .tail
  264. # [11:05] * Quits: payman (n=payman@pat.se.opera.com) ("Leaving")
  265. # [11:05] <MikeSmith> gsnedders: ah.. I will ping him later
  266. # [11:05] * Joins: payman (n=payman@pat.se.opera.com)
  267. # [11:06] <MikeSmith> Philip`: hooray why?
  268. # [11:07] <gsnedders> MikeSmith: That'll be the cause of the bug
  269. # [11:07] <MikeSmith> ah
  270. # [11:08] <MikeSmith> anyway, I need to drop off for now
  271. # [11:08] <MikeSmith> bbiab
  272. # [11:08] * Quits: MikeSmith (n=MikeSmit@EM114-48-207-45.pool.e-mobile.ne.jp) ("Tomorrow to fresh woods, and pastures new.")
  273. # [11:16] * Quits: GarethAdams|Work (n=GarethAd@pdpc/supporter/active/GarethAdams) ("Rebooting")
  274. # [11:22] * Quits: kmartiin (n=kmartiin@dslb-094-223-200-071.pools.arcor-ip.net) (Remote closed the connection)
  275. # [11:31] * Quits: Rik` (n=Rik`@pha75-2-81-57-187-57.fbx.proxad.net)
  276. # [11:36] * Quits: payman (n=payman@pat.se.opera.com) (Remote closed the connection)
  277. # [11:45] * Joins: workmad3 (n=workmad3@cspool71.cs.man.ac.uk)
  278. # [11:48] * Quits: Heimidal (n=heimidal@unaffiliated/heimidal) (Remote closed the connection)
  279. # [11:50] * Parts: adactio (n=adactio@host213-123-197-180.in-addr.btopenworld.com)
  280. # [11:51] * Quits: hoodow (n=hoodow@2001:41d0:1:f5e5:0:0:0:666) (Read error: 60 (Operation timed out))
  281. # [11:51] * Joins: hoodow (n=hoodow@2001:41d0:1:f5e5:0:0:0:666)
  282. # [12:00] * jgraham confesses that he wrote that code and agrees with Philip` that .tail sounds likely
  283. # [12:01] <jgraham> Although I don't remember the code and MikeSmith isn't here anyway so I don't really think I am contributing anything useful
  284. # [12:02] * Joins: breakmau5 (n=breakz@erft-4db7ca93.pool.mediaWays.net)
  285. # [12:03] * Joins: adactio (n=adactio@host213-123-197-180.in-addr.btopenworld.com)
  286. # [12:04] * Quits: Lachy (n=Lachlan@85.196.122.246) ("This computer has gone to sleep")
  287. # [12:07] <hsivonen> so much public-html email over the weekend...
  288. # [12:07] * jgraham can no longer keep up
  289. # [12:08] <jgraham> (although that is partially due to a large volume of non-public-html related things to do)
  290. # [12:09] <jgraham> (and, I suppose, the desire to spend some small fraction of my life not in front of a computer)
  291. # [12:14] * Philip` fails to understand such desires
  292. # [12:15] <Philip`> I suppose it might be bearable if the time you spend not in front of a computer is perhaps behind or beside a computer, or at least in close vicinity, and you interact with it via audio
  293. # [12:17] <hsivonen> public-html on speech synth day and night FTW
  294. # [12:18] * Joins: MikeSmith (n=MikeSmit@EM114-48-0-2.pool.e-mobile.ne.jp)
  295. # [12:18] * Joins: wakaba_0 (n=wakaba_@122x221x184x68.ap122.ftth.ucom.ne.jp)
  296. # [12:19] * Joins: Lachy (n=Lachlan@pat-tdc.opera.com)
  297. # [12:22] * Joins: zcorpan__ (n=zcorpan@90-224-190-71-no135.tbcn.telia.com)
  298. # [12:22] <zcorpan__> should the timeupdate event skip missed frames too?
  299. # [12:26] <MikeSmith> jgraham: so I find this: http://hg.hoppipolla.co.uk/hgwebdir.cgi/anolis/file/16550726fd0d/anolislib/processes/filter.py
  300. # [12:28] <MikeSmith> def remove(element):
  301. # [12:28] <MikeSmith> if element.tail:
  302. # [12:28] <MikeSmith> etc.
  303. # [12:28] <MikeSmith> not having any idea what lxml .tail is supposed to do, I can't tell if that's doing what it should be doing or not
  304. # [12:28] * MikeSmith goes to read up on .tail
  305. # [12:29] <zcorpan__> isn't tail the same as dom's nextSibling if it's a text node?
  306. # [12:30] <MikeSmith> yeah, seems so
  307. # [12:31] * MikeSmith don't understand why it wants to check the following node at all anyway
  308. # [12:34] * Quits: wakaba_1 (n=wakaba_@119-228-219-41.eonet.ne.jp) (Read error: 110 (Connection timed out))
  309. # [12:35] <MikeSmith> so what it seems to do is, if there's a text node following the element it wants to remove, it gets the element before the one it wants to remove, checks to see if that has a following text node, then concatenates that with the text node that follows the element it removes
  310. # [12:35] <foolip> zcorpan__: did I miss some discussion on timeupdate?
  311. # [12:35] <zcorpan__> foolip: don't think so
  312. # [12:35] <MikeSmith> I assume that the intent of this must be to preserve some whitespace that'd otherwise get dropped
  313. # [12:36] <MikeSmith> or something
  314. # [12:36] * Quits: MikeSmith (n=MikeSmit@EM114-48-0-2.pool.e-mobile.ne.jp) ("Tomorrow to fresh woods, and pastures new.")
  315. # [12:36] <jgraham> MikeSmith: Yes, you need to del with the case <p>This is <span>not</span> a paragraph</p>
  316. # [12:36] <jgraham> and wanting to remove the <span> without removing " a paragraph"
  317. # [12:37] * Quits: workmad3 (n=workmad3@cspool71.cs.man.ac.uk) (Remote closed the connection)
  318. # [12:37] <hsivonen> http://twitter.com/jdowdell/status/8159459869
  319. # [12:39] <Philip`> I think a node in lxml is like "<tag>text <child nodes ...></tag>tail" so I guess if you're removing the tag then the tail needs to merge into the previous sibling's tail (if any) or the parent's text
  320. # [12:39] <Philip`> but that seems to be exactly what filter.py is doing
  321. # [12:41] * Joins: payman (n=payman@pat.se.opera.com)
  322. # [12:42] * Joins: Utkarsh (n=admin@117.201.84.224)
  323. # [12:43] <jgraham> Er what Philip` said
  324. # [12:43] * jgraham is trying to do too many things at once
  325. # [12:48] * Joins: MikeSmith (n=MikeSmit@EM114-48-51-122.pool.e-mobile.ne.jp)
  326. # [12:52] * Quits: Utkarsh (n=admin@117.201.84.224) (Read error: 104 (Connection reset by peer))
  327. # [12:53] * Quits: payman (n=payman@pat.se.opera.com) ("Leaving")
  328. # [12:54] <zcorpan__> "INVALID_STATE_ERR or INVALID_ACCESS_ERR when attempting to write into XML documents" - hmm, are ms implementing xhtml?
  329. # [12:56] <Philip`> Maybe they're simply reviewing the spec, and happened to notice an inconsistency there
  330. # [12:57] * Joins: zalan (n=zalan@host-131.nrln.net)
  331. # [12:58] <hsivonen> hmm. it looks like Launchpad renumbers comments
  332. # [12:58] <hsivonen> so permalinks aren't perma
  333. # [13:00] * Joins: Utkarsh (n=admin@117.201.80.124)
  334. # [13:08] * Joins: payman (n=payman@pat.se.opera.com)
  335. # [13:08] <zcorpan__> i do not like subversion
  336. # [13:08] <zcorpan__> at least not when dealing with thousands of files
  337. # [13:11] * gsnedders doesn't like Subversion.
  338. # [13:12] <gsnedders> Regardless of anything.
  339. # [13:12] * Joins: svl (n=me@ip565744a7.direct-adsl.nl)
  340. # [13:15] <zcorpan__> also, i want foreign lands in html
  341. # [13:16] <zcorpan__> typing namespace decls sucks
  342. # [13:17] * Philip` likes most of Subversion, except for performance and lack of networkless operation
  343. # [13:17] * hsivonen prefers the way hg does branch merging
  344. # [13:18] <hsivonen> or, rather, does divergent trunk clone merging
  345. # [13:18] * hsivonen hasn't merged between "real" mercurial branches
  346. # [13:21] <jgraham> Philip`: So you like all of subversion apart from its distinguishing features?
  347. # [13:21] * jgraham realises this is not quite true
  348. # [13:23] <Dashiva> I like revision numbers
  349. # [13:23] <Philip`> jgraham: I like that you can check out subdirectories and don't need the whole history and can have access control on repositories, without needing any strange and uncommon and probably-poorly-tested extensions
  350. # [13:24] <Philip`> and I like that its newline handling is largely sensible
  351. # [13:24] <Philip`> and that it has good documentation and that the command-line client makes sense and that TortoiseSVN is good
  352. # [13:25] <Philip`> I don't think I care much about revision numbers - hashes seem fine
  353. # [13:25] * hsivonen wonders what newline handling counts as sensible here
  354. # [13:26] * hsivonen wishes Windows had sensible newline handling
  355. # [13:26] <Philip`> hsivonen: "sensible" means you can choose which files to apply special newline handling to and it defaults to off, and then Linux and Windows clients both see native newlines
  356. # [13:26] * Quits: starjive (i=beos@81-233-16-19-no30.tbcn.telia.com) (Read error: 60 (Operation timed out))
  357. # [13:28] * Joins: starjive (i=beos@81-233-16-19-no30.tbcn.telia.com)
  358. # [13:29] <Philip`> (I'm not sure what minor variations would still count as sensible)
  359. # [13:29] <Philip`> (It'd be nice to fix Windows but it's far too late for that, so tools should do their best to cope in such an environment)
  360. # [13:30] * Quits: cedricv (n=cedric@116.197.224.246)
  361. # [13:31] * Quits: MikeSmith (n=MikeSmit@EM114-48-51-122.pool.e-mobile.ne.jp) (Read error: 113 (No route to host))
  362. # [13:31] <jgraham> Philip`: I loathe the newline handling of subversion
  363. # [13:31] <gsnedders> +1
  364. # [13:32] * Quits: breakmau5 (n=breakz@erft-4db7ca93.pool.mediaWays.net) (Read error: 110 (Connection timed out))
  365. # [13:34] * Quits: roc (n=roc@121-74-157-214.telstraclear.net)
  366. # [13:35] <Philip`> jgraham: Why?
  367. # [13:35] <Philip`> Also, what alternative is less loathsome?
  368. # [13:36] * Quits: paul_iri_ (n=paul_iri@32.153.167.26) (Read error: 104 (Connection reset by peer))
  369. # [13:36] * Joins: breakmau5 (n=breakz@erft-4db7ca93.pool.mediaWays.net)
  370. # [13:36] <jgraham> Philip`: Because magically changing files is bad
  371. # [13:37] <jgraham> I want the same bytes out of the repository that I put in
  372. # [13:37] <Philip`> Not being able to look at files in Notepad is more bad
  373. # [13:37] <jgraham> Not really
  374. # [13:37] <Philip`> Yes it is :-p
  375. # [13:37] * Joins: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  376. # [13:39] <Philip`> (particularly when it's something aimed at relatively normal users, rather than developers)
  377. # [13:39] <Philip`> (like the data and configuration files that are included with the program)
  378. # [13:40] <jgraham> When are you ever in a situation where all you have is a windows computer with notepad and you can get hold of a svn co but can't get hold of a proper editor?
  379. # [13:41] * gsnedders makes sure everyone knows that him and jgraham are separate person.
  380. # [13:41] <gsnedders> s/person/people/
  381. # [13:41] <jgraham> If you really need windows line endings, just put windows line endings in the file
  382. # [13:42] <Philip`> It takes effort to find a decent editor and find out how to associate it with .txt files and context menu Edit and so on
  383. # [13:42] <hsivonen> Philip`: it seems like a bad idea to mangle the linefeeds in test cases and such
  384. # [15:43] * Disconnected
  385. # [15:44] * Attempting to rejoin channel #whatwg
  386. # [15:44] * Rejoined channel #whatwg
  387. # [15:44] * Topic is 'WHATWG: http://www.whatwg.org/ -- logs: http://krijnhoetmer.nl/irc-logs/ -- stats: http://gavinsharp.com/irc/whatwg.html -- Please leave your sense of logic at the door, thanks!'
  388. # [15:44] * Set by annevk42 on Mon Oct 19 22:03:06
  389. # [15:44] * Quits: karlushi (n=karlushi@fw.vdl2.ca) ("Leaving")
  390. # [15:44] <foolip> zcorpan__: ping
  391. # [15:45] * Quits: danbri (n=danbri@unaffiliated/danbri) (Remote closed the connection)
  392. # [15:47] <Dashiva> <details><teaser>
  393. # [15:49] <jgraham> Clearly we need to rename <details> <strip>
  394. # [15:50] <zcorpan__> foolip: pong
  395. # [15:50] <Dashiva> And one day we'll have an <accordion> element
  396. # [15:51] * Quits: Utkarsh (n=admin@117.201.87.83) (Read error: 60 (Operation timed out))
  397. # [15:52] <zcorpan__> we should use single-letter elements more
  398. # [15:52] <zcorpan__> fill up the alphabet
  399. # [15:52] <zcorpan__> <d><c> for details/caption
  400. # [15:53] <zcorpan__> <f><c> for figure/caption
  401. # [15:54] <Dashiva> <0>
  402. # [15:54] * Joins: cpearce_ (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz)
  403. # [15:54] <zcorpan__> can't use numbers for the first char
  404. # [15:54] <Dashiva> Why not?
  405. # [15:54] <hsivonen> Dashiva: legacy
  406. # [15:55] <Dashiva> How does it break?
  407. # [15:55] <zcorpan__> all browsers treat that as &lt;0>
  408. # [15:55] * Quits: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz) (Read error: 101 (Network is unreachable))
  409. # [15:55] <zcorpan__> most likely content relies on it
  410. # [15:55] * cpearce_ is now known as cpearce
  411. # [15:56] <hsivonen> and in the case of XML, it's prohibited either as some kind of SGML compat trick or as the WG imposing its aesthetics on everyone
  412. # [15:56] <zcorpan__> also, in xml it's not well-formed
  413. # [15:56] <zcorpan__> oops
  414. # [15:56] <daedb> <o0>
  415. # [15:56] <jgraham> hsivonen, like zcorpan but 10% faster and 100% more cynical ;)
  416. # [15:57] <AryehGregor> <o_0>
  417. # [15:57] <zcorpan__> that'd be an awesome element name
  418. # [15:57] <zcorpan__> write a change proposal for the figure thing
  419. # [15:58] <Dashiva> What about <_0>, or is _ impossible to use first too?
  420. # [15:58] <daedb> <_0> breaks
  421. # [15:58] <AryehGregor> Well, it's possible to use in C, and that's about as strict as things usually get.
  422. # [15:58] <zcorpan__> only a-z for text/html works
  423. # [15:58] <AryehGregor> Oh, guess not.
  424. # [15:58] <zcorpan__> _ works in xml though
  425. # [16:00] <Dashiva> Wow, xml being more forgiving, that's a rare event
  426. # [16:01] <Philip`> <0/>
  427. # [16:01] <Philip`> That's fine in XML5e (though not XML4e)
  428. # [16:02] <Dashiva> <Ø> is sort for <O/>
  429. # [16:02] <Dashiva> *short
  430. # [16:02] <zcorpan__> what's the adoption rate for 5e?
  431. # [16:03] * Philip` notices that libxml's xmllint has a "--oldxml10" option for enabling pre-5th-edition rules, which seems to express an expectation or hope that it's not going to change incompatibly again and need a --notsooldxml10 option
  432. # [16:03] <AryehGregor> Dashiva, XML has always allowed lots of things text/html didn't, like <p><div></div></p>.
  433. # [16:04] * jgraham wonders if XML allows <𐂄>
  434. # [16:04] <gsnedders> jgraham: yes
  435. # [16:04] <jgraham> .me wonders if that character worked for anyone
  436. # [16:04] <Dashiva> The empty space? :)
  437. # [16:04] * gsnedders got U+FFFD
  438. # [16:04] * jgraham was aiming for U+10084
  439. # [16:05] <zcorpan__> wfm
  440. # [16:05] <Dashiva> Make a dialect that's like HTML but using Japanese full-width character
  441. # [16:05] <hsivonen> the concept of "old XML 1.0" makes versioning look awesome
  442. # [16:05] <jgraham> (Linear B Ideogram Mare, to symbolise the nightmare of choosing names)
  443. # [16:06] <gsnedders> jgraham: What about Unicode 5.2 Carakan characters?
  444. # [16:06] <gsnedders> jgraham: Who cares about old Linear B? :P
  445. # [16:06] <zcorpan__> looks kind of like a horse's head to me
  446. # [16:06] * jgraham wonders what U+10097 is supposed to be
  447. # [16:07] <jgraham> The caracter description doesn't say but if I were guessing I'd go for "drag queen"
  448. # [16:07] <TabAtkins> jgraham: I got 10084. It's a box saying that, not a character, but still.
  449. # [16:07] <jgraham> *character
  450. # [16:08] <zcorpan__> TabAtkins: get better fonts
  451. # [16:08] <TabAtkins> Yeah, I need to.
  452. # [16:08] <TabAtkins> I suspect I could view it on my work machine.
  453. # [16:09] <zcorpan__> it's vital to be able to see the spec's hour glasses and jgraham's horse heads
  454. # [16:09] * AryehGregor can't :(
  455. # [16:09] * AryehGregor shakes fist at Ubuntu
  456. # [16:09] <AryehGregor> http://www.fileformat.info/info/unicode/char/10084/index.htm
  457. # [16:13] * Joins: karlushi (n=karlushi@fw.vdl2.ca)
  458. # [16:14] * Joins: cpearce_ (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz)
  459. # [16:19] * Joins: danbri (n=danbri@unaffiliated/danbri)
  460. # [16:20] * Quits: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz) (Read error: 60 (Operation timed out))
  461. # [16:20] * cpearce_ is now known as cpearce
  462. # [16:28] <Philip`> TabAtkins: I think Shelley's discussion of comments is relevant for srcdoc - the sandbox feature apparently has ads as a use case, but nobody would use sandbox+srcdoc for ads, whereas it is claimed they would use sandbox+srcdoc for comments, so if sandbox+srcdoc didn't work for comments then a sensible solution would be to remove srcdoc
  463. # [16:29] <TabAtkins> That's true, but still irrelevant for @srcdoc itself. She's discussing @sandbox's features/limitations.
  464. # [16:29] <Philip`> (not to remove sandbox, because that has other use cases)
  465. # [16:29] <Philip`> TabAtkins: sandbox's features/limitations in the context of the use case which motivates the existence of srcdoc
  466. # [16:29] <TabAtkins> Yes.
  467. # [16:30] <Philip`> and if it's too limited to be useful then there's no longer any motivation for the existence of srcdoc
  468. # [16:30] <TabAtkins> But we're not going to change @srcdoc if we find that @sandbox needs to be changed for comments. We might remove it, but we won't change it. @srcdoc's abilities are irrelevant.
  469. # [16:30] <AryehGregor> Unless sandbox is conceptually useless for comments altogether.
  470. # [16:30] * AryehGregor hasn't looked yet
  471. # [16:31] <Philip`> TabAtkins: Removing srcdoc is what she's suggesting
  472. # [16:32] <zcorpan__> i'm a bit skeptical about sandbox for comments -- i think serverside whitelisting is better
  473. # [16:32] <TabAtkins> Philip`: Yes, I understand. But she's talking about @sandbox.
  474. # [16:32] <TabAtkins> zcorpan__: Not better, I'd say. Useful in conjunction, yes.
  475. # [16:32] <zcorpan__> if you use serverside whitelisting then you don't need an iframe at all
  476. # [16:32] <TabAtkins> @sandbox's features for limiting scripts are still quite useful, I think, even if you employ serverside filtering to remove particular things.
  477. # [16:33] <TabAtkins> zcorpan__: Sure, but you have to be very conservative then.
  478. # [16:33] <zcorpan__> yes
  479. # [16:33] <Philip`> Server-side whitelisting is likely to have bugs, or be more restrictive than you want
  480. # [16:33] <zcorpan__> browsers are also likely to have bugs or be more or less restrictive than you want
  481. # [16:33] <Philip`> particularly if you want to allow some CSS
  482. # [16:34] * Quits: KevinMarks (n=KevinMar@c-67-161-44-219.hsd1.ca.comcast.net) (Read error: 110 (Connection timed out))
  483. # [16:34] <AryehGregor> Server-side whitelisting is just much more complicated.
  484. # [16:34] <Philip`> zcorpan__: Sure, so you use both, and it's no more restrictive than the server-side whitelisting and bugs are only a problem if they coincide
  485. # [16:34] <AryehGregor> It's the better solution if you can be bothered, but it would be nice to be able to just write up something secure by hand in an hour.
  486. # [16:35] <Philip`> You need whitelisting to stop people being irritating and filling your page with platypuses, regardless of whether the browser successfully prevents comments from stealing your admin session cookies
  487. # [16:35] <zcorpan__> maybe you can use an off-the-shelf sanitizer
  488. # [16:36] <Philip`> They're complicated and easy to misconfigure
  489. # [16:36] <Philip`> so they don't seem like a complete solution to the problem
  490. # [16:38] * Quits: JonathanNeal (n=Jonathan@adsl-99-56-193-35.dsl.lsan03.sbcglobal.net) (Read error: 110 (Connection timed out))
  491. # [16:39] <AryehGregor> Philip`, how would whitelisting stop people from filling your page with (possibly ASCII-art) platypuses?
  492. # [16:41] <Philip`> Nobody would object to ASCII-art platypuses
  493. # [16:41] <Philip`> Anyway, you could just configure your whitelist to only allow dolphins and eagles, not platypuses
  494. # [16:42] <AryehGregor> I would support that. Dolphins and eagles are much prettier than platypuses.
  495. # [16:42] * gsnedders starts argument about the plural of platypus
  496. # [16:42] <workmad3> platypii?
  497. # [16:42] <Philip`> Maybe a better example is people putting autoplaying <audio> in comments, which you'd want to prevent even though it's not an XSS vulnerability of any sort
  498. # [16:42] <gsnedders> workmad3: Certainly wrong
  499. # [16:43] <workmad3> gsnedders: most likely :)
  500. # [16:43] <Philip`> "Plural platypuses, platypi, (rare) platypusses, (rare) platypodes."
  501. # [16:43] <workmad3> I only added an extra i then :)
  502. # [16:44] <TabAtkins> "radii" has poisoned people into thinking that two i's are appropriate.
  503. # [16:44] <workmad3> what's the current argument about anyway? can't spot the start of it in my chat log
  504. # [16:44] <gsnedders> workmad3: If it were a second declension Latin noun, the norm. plural is -i
  505. # [16:45] <Philip`> TabAtkins: It'd be appropriate for platypius, I guess
  506. # [16:45] <TabAtkins> Indeed.
  507. # [16:45] <gsnedders> 'platypus (plural: platypuses, or platypus; common, pseudo-latin: platypi; rare, pedantic: platypodes)'
  508. # [16:46] <TabAtkins> Like all the other blatantly wrong grammar rules drilled into us as kids, I'm pretty sure that the -i plural was invented in the 19th century.
  509. # [16:46] <AryehGregor> gsnedders, the problem is that lots of those nouns happen to have a stem ending in -i.
  510. # [16:46] <AryehGregor> TabAtkins, er, it's from Latin.
  511. # [16:46] <AryehGregor> Dates to several hundred years BCE at least.
  512. # [16:47] <AryehGregor> Second-declension nouns, as gsnedders says.
  513. # [16:47] <TabAtkins> AryehGregor: Indeed it is. The application of Latin rules to English, a language not derived from Latin in any significant way, is much more recent.
  514. # [16:47] <gsnedders> AryehGregor: Indeed
  515. # [16:47] <AryehGregor> TabAtkins, English has vast amounts of vocabulary from Latin, both directly and indirectly.
  516. # [16:47] <AryehGregor> "radius" is taken directly from Latin, I suspect.
  517. # [16:47] <AryehGregor> So are lots of other nouns like "focus".
  518. # [16:47] <TabAtkins> Vocabulary, yes. Not conjugations.
  519. # [16:47] <TabAtkins> We mug languages the world over for vocabulary.
  520. # [16:47] <AryehGregor> This isn't a conjugation, it's a declension. :P
  521. # [16:48] <TabAtkins> The distinction is irrelevant and meaningless to me.
  522. # [16:48] <TabAtkins> I conjugate my nouns into a plural state.
  523. # [16:48] <Philip`> But platyp* weren't discovered until 1798, so it's not like you could ask a Roman what they'd call two of them
  524. # [16:48] <AryehGregor> Often we use the original plural for loan words.
  525. # [16:48] <gsnedders> AryehGregor: But also a fair bit of Latinized Greek words, where the rules are often sutly different
  526. # [16:48] <AryehGregor> Not just in Latin's case.
  527. # [16:48] <TabAtkins> I doubt it would be "often".
  528. # [16:48] <TabAtkins> Some cases. Like "children".
  529. # [16:48] <AryehGregor> gsnedders, yes, and also some straight Greek words, or Greek-derived words.
  530. # [16:48] <AryehGregor> TabAtkins, "child" isn't a loan word.
  531. # [16:49] <AryehGregor> Anyway, the problem here is that Greek "pous", meaning "foot", plural "podes", got transliterated as "pus", which then looked like a Latin second-declension noun.
  532. # [16:49] <gsnedders> Like, analyse and realize where the fact that one uses s and the other uses z is because one is of French origin, and the other Latinized Greek
  533. # [16:49] <TabAtkins> It came straight from our German language-ancestry.
  534. # [16:49] <AryehGregor> Much like "octopus".
  535. # [16:49] <AryehGregor> TabAtkins, right. But we have irregular plurals from loan words too.
  536. # [16:49] <TabAtkins> Sometimes, yes.
  537. # [16:50] <TabAtkins> On the other hand, the -i rule is taught as an absolute that applies to all nouns ending in -us.
  538. # [16:50] <TabAtkins> Luckily we don't have too many of them.
  539. # [16:50] <AryehGregor> It's only taught that way by ignorami. :)
  540. # [16:50] <AryehGregor> I don't think anyone educated says it should be used that way. For some words it's just totally wrong.
  541. # [16:50] <gsnedders> TabAtkins: Much like -ise and -ize, where it's often taught that only one is right.
  542. # [16:50] <AryehGregor> Like "platypus".
  543. # [16:50] <TabAtkins> Similarly, the occasionaly -a pluralization applied to words ending in -um.
  544. # [16:50] <AryehGregor> -um because -a, -a becomes -ae.
  545. # [16:50] <AryehGregor> In Latin, typically.
  546. # [16:50] <TabAtkins> AryehGregor: You're wrong. Plenty of educated people say it should be used that way. They're wrong, but still.
  547. # [16:51] <TabAtkins> The -i pluralization is, in fact, more an education tip-off than not.
  548. # [16:51] <AryehGregor> TabAtkins, not educated enough, then. :P (Source, though?)
  549. # [16:51] <workmad3> for example, I'm an educated person... just not educated in english :P
  550. # [16:51] <workmad3> (as in all the esoteric language mechanics, not the language in general)
  551. # [16:51] <AryehGregor> TabAtkins, I really doubt anyone who's not a patent moron (admittedly, there are some of those) would seriously argue that the plural of "medium" (as in someone who speaks to spirits) is "media".
  552. # [16:51] <TabAtkins> Down here in Texas, at least, the less-educated segment of the populous typically pluralizes with the standard english rules.
  553. # [16:51] <AryehGregor> populace.
  554. # [16:51] <AryehGregor> :P
  555. # [16:51] <TabAtkins> AryehGregor: Education and patent idiocy are not antagonistic.
  556. # [16:51] <TabAtkins> Also: d'oh!
  557. # [16:52] <AryehGregor> But right, this is all a social status thing.
  558. # [16:52] * jgraham notes the interesting fact that louse is irreguloar in plural in Swedish also
  559. # [16:52] <AryehGregor> I mean, education is largely a status thing anyway.
  560. # [16:52] <jgraham> (I have no idea what it is in the singular or plural but I do remember it is irregular)
  561. # [16:52] <workmad3> AryehGregor: medium - media would more likely be used by some pedantic jackass trying to prove a point rather than a moron :)
  562. # [16:52] <TabAtkins> In fact, the *only* people who would attempt to argue that "medium" pluralizes to "media" are the highly-educated, or those aspiring to be. You have to be an idiot as well, of course.
  563. # [16:53] <gsnedders> What is it that boy is in Latin? That's got fun irregularity too.
  564. # [16:53] <AryehGregor> gsnedders, puella is girl, right?
  565. # [16:53] <gsnedders> puer
  566. # [16:53] <AryehGregor> Right, puer.
  567. # [16:53] <gsnedders> AryehGregor: yeah
  568. # [16:53] * Parts: zcorpan__ (n=zcorpan@90-224-190-71-no135.tbcn.telia.com)
  569. # [16:53] <gsnedders> And then all the fun with hic, haec, hoc
  570. # [16:53] <AryehGregor> I'd expect puer to go puer, . . . hmm. Not sure, actually. It can't go like pater, patri.
  571. # [16:53] * AryehGregor never actually took a Latin lesson in his life, but has picked up a bit
  572. # [16:53] <gsnedders> puer, puer, puer, and then something else.
  573. # [16:54] <Philip`> puer sounds dirty
  574. # [16:54] <gsnedders> puer is second declension masculine with -er stem.
  575. # [16:54] <gsnedders> Whcih means, looking it up, -, -i, -o, -um, -o, -, -i
  576. # [16:55] <gsnedders> And the nominative case plural is… pueri.
  577. # [16:55] <AryehGregor> Common words tend to be the most irregular, in all languages.
  578. # [16:55] <gsnedders> In what language is "to be" regular?
  579. # [16:55] <AryehGregor> Look at English words like "women", or "of". Those have totally arbitrary spelling even by English standards.
  580. # [16:55] <TabAtkins> In my conlong.
  581. # [16:56] <TabAtkins> s/conlong/conlang/
  582. # [16:56] <AryehGregor> gsnedders, not in English, or Hebrew, or . . . well, that's all the languages I know.
  583. # [16:56] * Joins: danbri_ (n=danbri@unaffiliated/danbri)
  584. # [16:56] <AryehGregor> Probably in Lojban.
  585. # [16:56] <AryehGregor> And Esperanto.
  586. # [16:56] <AryehGregor> Dunno.
  587. # [16:56] <gsnedders> Not in Latin, either, and that has quite few irregular verbs
  588. # [16:56] <TabAtkins> So, yeah, conlangs.
  589. # [16:57] <gsnedders> Latin has 10 irregular verbs, IIRC
  590. # [16:57] <gsnedders> Anyhow, I decided not to do a Eng. lang. and linguistics degree, so I am wholly ignorant
  591. # [16:57] <TabAtkins> Seriously, IE? I have to actually say style{display:none;}, or else you'll render a border around it? Wtf.
  592. # [16:59] * Quits: maikmerten (n=merten@ls5dhcp196.cs.uni-dortmund.de) (Remote closed the connection)
  593. # [17:05] <Dashiva> It's half regular in Japanese
  594. # [17:05] <Dashiva> Since they have separate verbs for predicate designation and existence :)
  595. # [17:07] * Quits: Maurice (n=ano@a80-101-46-164.adsl.xs4all.nl) ("Disconnected...")
  596. # [17:07] <Philip`> If something's half regular, that means it's not regular, which surely means it's irregular
  597. # [17:10] * Joins: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net)
  598. # [17:10] * Quits: breakmau5 (n=breakz@erft-4db7ca93.pool.mediaWays.net) (No route to host)
  599. # [17:12] <TabAtkins> Argh, FF is ignoring my content-type header and interpreting this file as text/plain. >_< Everyone else pays proper attention to it and lets me download it, FF just barfs the binary all over the screen.
  600. # [17:12] * Joins: dbaron (n=dbaron@c-98-234-51-190.hsd1.ca.comcast.net)
  601. # [17:13] * Quits: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net) (Client Quit)
  602. # [17:14] <gavin> TabAtkins: what file?
  603. # [17:14] * Joins: paul_irish (n=paul_iri@c-71-192-163-128.hsd1.nh.comcast.net)
  604. # [17:14] <TabAtkins> igofigure.com/glados/emails/DoorAccessInformation.oft
  605. # [17:14] <TabAtkins> for one
  606. # [17:14] <gavin> I get a prompt to save the file
  607. # [17:14] <TabAtkins> In FF?
  608. # [17:14] <gavin> yes
  609. # [17:15] <TabAtkins> What version?
  610. # [17:15] <gavin> windows and mac
  611. # [17:15] <gavin> trunk and 3.6
  612. # [17:15] <TabAtkins> How weird. Both me and my coworker are on Windows and 3.6, and we're getting the same response.
  613. # [17:17] <gavin> do you have a handler configured for that mime type?
  614. # [17:17] <gavin> (Options->Applications)
  615. # [17:17] <TabAtkins> No, but I have a "ForceType application/vnd.ms-outlook" directive in the .htaccess in that directory.
  616. # [17:18] <gavin> try clearing your cache?
  617. # [17:20] <TabAtkins> … Yeah, that was it. I kept clicking on the same file. Clicking on a new one works.
  618. # [17:20] <TabAtkins> Good enough!
  619. # [17:21] <Dashiva> Philip`: 2/3, even, since they have separate existence verbs for animate and inanimate objects
  620. # [17:23] * Quits: danbri (n=danbri@unaffiliated/danbri) (Success)
  621. # [17:25] * Quits: mhausenblas (n=mhausenb@wg1-nat.fwgal01.deri.ie) ("brb")
  622. # [17:26] <AryehGregor> Crazy Japanese.
  623. # [17:26] * AryehGregor tries to think what aspects of Hebrew are weird.
  624. # [17:26] <TabAtkins> The numbering system.
  625. # [17:26] <Dashiva> (And that's without going into all the various politeness levels, with their separate verbs)
  626. # [17:27] <AryehGregor> That's not weird, it's ripped straight off the Greeks and makes a lot of sense.
  627. # [17:27] <AryehGregor> Ian just thought it was weird because he was given some crazy version modified to allow arbitrarily large numbers.
  628. # [17:27] <AryehGregor> The traditional one only goes up to 999,999 in a standard way.
  629. # [17:27] <TabAtkins> Go tell that to Hixie, who *still* can't get people to agree that the Hebrew list-style is correct.
  630. # [17:27] <TabAtkins> Heh, you beat me.
  631. # [17:27] <AryehGregor> It was changed after he wrote it to a much simpler version.
  632. # [17:27] <AryehGregor> Due to me, actually. That was how I first joined www-style.
  633. # [17:27] <Dashiva> Danish numbers are also silly
  634. # [17:28] <gsnedders> TabAtkins: Heh, that one
  635. # [17:28] <AryehGregor> Dashiva, are there different verbs to say that an inanimate object exists, and to *politely* say it exists?
  636. # [17:28] <Dashiva> The animate/inanimate distinction is removed in most cases when being polite
  637. # [17:28] <Philip`> English numbers are silly too
  638. # [17:29] <Philip`> They ought to be little-endian
  639. # [17:29] <TabAtkins> lolwut
  640. # [17:29] <Dashiva> Pssh
  641. # [17:29] <gsnedders> Philip`: x86 has corrupted you
  642. # [17:29] <TabAtkins> bigendian 4 eva
  643. # [17:29] <Dashiva> Danes switch to counting scores halfway to 100
  644. # [17:29] <Dashiva> I mean, what the hell
  645. # [17:29] * Joins: JonathanNeal (n=Jonathan@rrcs-76-79-114-213.west.biz.rr.com)
  646. # [17:29] <TabAtkins> Dashiva: So do the French, I believe?
  647. # [17:29] <AryehGregor> Philip`, huh? English numbers *are* little-endian. The least significant digit is last.
  648. # [17:29] <daedb> Dashiva: Everything is silly in danish :p
  649. # [17:30] <jgraham> I thought no-one understood Danish numbering?
  650. # [17:30] <Dashiva> 10, 20, 30, 40... half three scores
  651. # [17:30] <Philip`> When you do something as simple as addition by hand, you align the two numbers to the right and start calculating the result from the rightmost digit and carry leftwards
  652. # [17:30] <TabAtkins> AryehGregor: You have it backwords.
  653. # [17:30] <AryehGregor> What?
  654. # [17:30] <Philip`> which is backwards compared to the left-to-right flow of normal English
  655. # [17:30] <TabAtkins> Little-endian means lsd is first.
  656. # [17:30] <AryehGregor> "little-endian" means "the end is small", no?
  657. # [17:30] <Philip`> It'd make much more sense to write the least significant digits first
  658. # [17:30] * Quits: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz) (Read error: 110 (Connection timed out))
  659. # [17:31] <TabAtkins> The little end comes first.
  660. # [17:31] <TabAtkins> As opposed to the big end coming first.
  661. # [17:31] <AryehGregor> "end" means the *first* byte?
  662. # [17:31] <AryehGregor> How absurd.
  663. # [17:31] <TabAtkins> http://en.wikipedia.org/wiki/File:Big-Endian.svg
  664. # [17:31] <AryehGregor> Philip`, but in division, you start from the most significant digit.
  665. # [17:31] <Philip`> Little-endian means you eat the least significant end of the egg first
  666. # [17:31] <Dashiva> But that's the outside
  667. # [17:31] <Dashiva> Much help you are, Philip`
  668. # [17:32] <AryehGregor> Also, we pronounce the most significant part first, which makes a lot of sense.
  669. # [17:32] <AryehGregor> On the other hand, when reading, you do have to scan to the end of the number to figure out how large it is before you can begin pronouncing it.
  670. # [17:32] <TabAtkins> Argh, this flashing SHODAN is distracting. Which is the point, of course.
  671. # [17:32] <Dashiva> If you use zero extension, you can do big-endian division
  672. # [17:32] * Joins: jgornick (n=joe@199.199.210.66)
  673. # [17:32] <AryehGregor> We have to do a two-pass algorithm to read written numbers. :()
  674. # [17:32] <AryehGregor> :(
  675. # [17:33] <Philip`> It's more exciting to read out big numbers starting with the least significant digit
  676. # [17:33] <Dashiva> ... I might start doing that
  677. # [17:33] <Philip`> It leaves the listener in suspense, waiting for the revelation of the MSDs
  678. # [17:34] <Dashiva> Yes, excellent plan
  679. # [17:34] <AryehGregor> But that's non-standard.
  680. # [17:34] <Dashiva> Japanese avoids this problem by having components
  681. # [17:34] <Dashiva> But even there you have to scan some for bigger numbers
  682. # [17:34] <Dashiva> (more than 100,000)
  683. # [17:34] <AryehGregor> Biblical Hebrew is sometimes big-endian and sometimes little-endian.
  684. # [17:34] <AryehGregor> Dashiva, well, if it's less than 100,000, you hardly have to scan much ahead in any case.
  685. # [17:35] <AryehGregor> Of course, Biblical Hebrew has no digits, it just spells out the words.
  686. # [17:35] * Quits: workmad3 (n=workmad3@cspool71.cs.man.ac.uk) (Remote closed the connection)
  687. # [17:35] * Quits: dios_mio (i=test@88.243.97.28) (Read error: 110 (Connection timed out))
  688. # [17:35] <Dashiva> Well, being able to stream process is still preferable
  689. # [17:36] <Dashiva> A eight-character buffer should be sufficient for arbitrarily large numbers
  690. # [17:36] <Philip`> Maybe people mixed up the digit ordering in the Bible and the number of the beast is not actually 666, it's 666
  691. # [17:36] * Quits: danbri_ (n=danbri@unaffiliated/danbri) (Remote closed the connection)
  692. # [17:36] <Philip`> Oh, wait
  693. # [17:36] <AryehGregor> Philip`, wrong Bible, too. :P
  694. # [17:36] <Dashiva> I hear they mixed it up and it's actually 616
  695. # [17:37] <TabAtkins> You got it backwards, Dashiva. 616.
  696. # [17:37] * TabAtkins overplays a joke.
  697. # [17:37] <Dashiva> You got it backwards, TabAtkins. That was the joke.
  698. # [17:37] <TabAtkins> Hoisted by my own petard!
  699. # [17:38] <AryehGregor> Maybe they got it backwards and it's really 999.
  700. # [17:41] * Joins: danbri (n=danbri@dyn26-112.roaming.few.vu.nl)
  701. # [17:41] <Dashiva> Hey Philip`
  702. # [17:41] <Dashiva> When reading numbers backwards, should you say like "one forty six hundred" or "one and forty and six hundred"
  703. # [17:41] * Quits: mat_t (n=mattomas@91.189.88.12) (Client Quit)
  704. # [17:42] <Philip`> I suggest "one four six"
  705. # [17:42] <Philip`> You can insert a little pause for thousands markers
  706. # [17:43] <Dashiva> That seems inefficient
  707. # [17:43] <Dashiva> Since you'd have to pronounce all the trailing zeroes in large numbers
  708. # [17:44] <Philip`> Use run-length encoding
  709. # [17:44] <Philip`> or scientific notation
  710. # [17:45] <Dashiva> Maybe I'll do a mix-endian approach
  711. # [17:45] <Dashiva> Sixhundred and forty-one, seven hundred thousand, twenty million, etc
  712. # [17:45] <Philip`> "nine e nine two point four" etc
  713. # [17:46] * Joins: GarethAdams|Work (n=GarethAd@pdpc/supporter/active/GarethAdams)
  714. # [17:46] * Joins: AlicanC (n=alicancu@78.179.249.98)
  715. # [17:46] <jgraham> We could say numbers big endian and write them little endian
  716. # [17:47] <AryehGregor> How about we just say stuff totally at random and rely on telepathy for actual communication?
  717. # [17:47] <Dashiva> I like the mixed one. It reuses the existing terminology, but has the additional benefit of leaving the viewer with the overall magnitude fresh in mind when the number ends
  718. # [17:47] <Dashiva> s/viewer/listener/
  719. # [17:48] <jgraham> It limits you to 99 balls in the lottery though
  720. # [17:48] <jgraham> Since elleven one hundred could be one ball or two
  721. # [17:48] <Dashiva> No, 999
  722. # [17:49] <Dashiva> Digits are grouped in threes
  723. # [17:49] <jgraham> Hmm I guess that is OK
  724. # [17:50] * Joins: Maurice (i=copyman@5ED548D4.cable.ziggo.nl)
  725. # [17:50] <Dashiva> If needed, you could always start a number explicitly by saying "point zero"
  726. # [17:50] <Philip`> A lottery with 111 balls? You need to give players *some* chance of winning
  727. # [17:50] <FireFly> "ninety-nine and nine hundred"?
  728. # [17:51] <Dashiva> Philip`: The chance of winning depends on the number of balls selected too, not just the total
  729. # [17:52] <Philip`> I suppose so, but it'd be really dull if you only had to pick four numbers
  730. # [17:52] <jgraham> It's pretty dull already, statistically speaking
  731. # [17:53] <Philip`> I think anyone who speaks statistically is not the target audience for lotteries
  732. # [17:54] <Dashiva> You could have billions and billions of balls, and let people pick all except one
  733. # [17:54] <Dashiva> And then draw all except one ball
  734. # [17:54] <Dashiva> You'd get so many right! So close!
  735. # [17:55] <GarethAdams|Work> you could let them pick up to 199, but actually have balls numbered up to 200
  736. # [17:56] <FireFly> "choose a number between 1 and 199." "And the number is... 200!"
  737. # [17:56] <FireFly> (not the factorial of 200, that is)
  738. # [17:57] <Philip`> You could be like ERNIE and do a million draws per month, so surely one of them will match your number
  739. # [17:58] * Quits: danbri (n=danbri@unaffiliated/danbri) (Remote closed the connection)
  740. # [17:59] <AlicanC> does xhtml spec always follow the html spec or are they like developed (spec'd) seperately?
  741. # [17:59] <Dashiva> XHTML 1.0 is a delta spec
  742. # [17:59] <AlicanC> thanks for random fact
  743. # [17:59] <gsnedders> With quite a few undocumented changes
  744. # [18:00] <AlicanC> so when html5 hits final will there be a new release of xhtml spec with <video> and stuff?
  745. # [18:00] <Philip`> AlicanC: If you mean XHTML5/HTML5, they're defined in the same document as different syntaxes for the same language
  746. # [18:00] <AlicanC> xhtml5? so the version jumps from 1.1 to 5?
  747. # [18:00] <Philip`> so there's (almost) no difference in functionality
  748. # [18:01] <Philip`> AlicanC: Consider it to be "X HTML5" rather than "XHTML 5"
  749. # [18:01] <Philip`> since it's basically just an XML syntax for HTML5
  750. # [18:01] <Philip`> rather than being an evolution of XHTML1
  751. # [18:02] <AlicanC> ok ty
  752. # [18:06] <AlicanC> this is not a technical question but, should we expect more cross-browser compatibility after the realease of HTML5?
  753. # [18:06] <Dashiva> Yes
  754. # [18:07] <Dashiva> Or rather, it's already happening
  755. # [18:07] <AlicanC> yeah but i still had to follow one method for each browser to capture some mouse events
  756. # [18:08] <AlicanC> its not really related to the HTML spec but I just thought that release of it might trigger something like that
  757. # [18:08] * Joins: mackstann (n=death@216-20-152-177-dsl.hevanet.com)
  758. # [18:09] <Philip`> "release" doesn't have much significance
  759. # [18:09] <AryehGregor> Browsers are mostly converging in this sort of thing, thankfully.
  760. # [18:09] <AryehGregor> But it's not going to change overnight.
  761. # [18:09] <Philip`> People are always writing specs, and people are always fixing bugs in browsers to hopefully match the specs better
  762. # [18:09] <AryehGregor> HTML5 is doing a lot to weed out corner-cases where browsers diverge.
  763. # [18:09] <Dashiva> The IE event model is probably not going to change soon
  764. # [18:10] <Philip`> I guess mouse events are a Web Apps WG thing?
  765. # [18:10] <Dashiva> Yeah
  766. # [18:10] <AlicanC> i dont know if html specs contain stuff about events etc.
  767. # [18:10] <AlicanC> so it does?
  768. # [18:10] <Philip`> (It's strange how browsers spend lots of time with flashy videos and 3D graphics and fancy fonts but haven't bothered to get mouse and keyboard input working decently yet)
  769. # [18:10] <Dashiva> Only the HTML-specific stuff
  770. # [18:11] <AlicanC> to be honest the whole javascript is a disaster
  771. # [18:11] <Dashiva> It's not that strange
  772. # [18:11] <Dashiva> It's easier to invent something new than to fix a trainwreck
  773. # [18:11] <AlicanC> i guess theres no spec for javascript developers to follow for function naming / etc.
  774. # [18:12] <Dashiva> I'm sure shepazu can regale us with stories about those who tried
  775. # [18:14] <AlicanC> actually companies can spare some time for fixing those trainwrecks since new standartd like HTML5 and CSS3 is nearing their releases
  776. # [18:15] <AlicanC> and also, on the rendering side, stuff being rendered by Direct2D etc..
  777. # [18:16] * Quits: sbublava (n=stephan@77.116.138.174.wireless.dyn.drei.com) (Client Quit)
  778. # [18:21] <AryehGregor> HTML5 and CSS3 are nowhere near finished.
  779. # [18:21] <AryehGregor> Nor anywhere near fully implemented.
  780. # [18:21] <AryehGregor> Even the high-profile features like HTML5 <video> still have a lot of work to be done on them in shipping implementations.
  781. # [18:22] <AryehGregor> We only just got a <video> implementation that even supports fullscreen.
  782. # [18:24] * Philip` saw a Firefox 3.6 announcement saying it has the "world’s best implementation" of <video>, now with fullscreen support
  783. # [18:25] <AlicanC> im not saying that HTML5 will be released tomorrow and the day after, all browsers will be recoded from scratch and be shipped in cashmere CD cases with fluffy bears and kittens on them
  784. # [18:25] <AlicanC> no one is that optimisic
  785. # [18:25] <Philip`> (It seems kind of disappointing that that kind of feature is not just taken for granted)
  786. # [18:26] <Philip`> AlicanC: I don't think they'll be shipped on CDs - digital distribution is much cheaper
  787. # [18:26] <Philip`> The rest sounds good to me, though
  788. # [18:27] * Joins: mlpug (n=mlpug@a88-115-164-40.elisa-laajakaista.fi)
  789. # [18:28] <AlicanC> i just dont want people to judge my thoughts with 100% shallowness
  790. # [18:29] <AlicanC> HTML 4.01 is dated 1999. if html5 is going to be released in next 1 year i call it near compared to 11 year passed
  791. # [18:30] * Joins: danbri (n=danbri@unaffiliated/danbri)
  792. # [18:31] * Quits: danbri (n=danbri@unaffiliated/danbri) (Remote closed the connection)
  793. # [18:31] <Dashiva> Philip`: And the fullscreen support seems rather weak, considering all the complaints I've read in blog posts about <video>
  794. # [18:31] * Quits: pesla (n=retep@procurios.xs4all.nl) ("( www.nnscript.com :: NoNameScript 4.21 :: www.esnation.com )")
  795. # [18:31] <gsnedders> AlicanC: Nowadays for a spec to become a REC it needs two interoperable implementations, with a full test suite. HTML 4.01 doesn't have that after 11 years, I'd be absolutely amazed if HTML 5 did within a year or two.
  796. # [18:32] <AryehGregor> AlicanC, HTML5 is probably not going to have multiple, full, interoperable implementations of *every* feature for ten years. So that's not what you should be looking for. Look at it feature-by-feature.
  797. # [18:32] <AryehGregor> "Is <video> support in shipping browsers good enough for me to use yet?"
  798. # [18:33] <AryehGregor> (if you're YouTube, evidently "yes")
  799. # [18:33] <Dashiva> Nice gallery links. "Older stuff" and "next page" go back in time, whereas "Newer stuff" and "previous page" go forward.
  800. # [18:33] <TabAtkins> Argh, I *hate* it when things work like that.
  801. # [18:33] <AlicanC> i wouldnt take fullscreen support into consideration
  802. # [18:33] <Dashiva> But it gets better
  803. # [18:34] * Quits: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net) (Remote closed the connection)
  804. # [18:34] <Dashiva> They're paired together "Previous page" with "Older stuff", and "Newer stuff" with "Next page"
  805. # [18:34] <TabAtkins> That's… That's disgusting.
  806. # [18:34] <TabAtkins> The pairing makes perfect sense if you pay attention to the words. The links, though…
  807. # [18:34] * Joins: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net)
  808. # [18:35] <AlicanC> thats innovation lol
  809. # [18:35] <AlicanC> :D
  810. # [18:38] * Quits: payman (n=payman@pat.se.opera.com) ("Leaving")
  811. # [18:38] * Quits: zalan (n=zalan@host-131.nrln.net) (Read error: 110 (Connection timed out))
  812. # [18:38] * Quits: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net) (Remote closed the connection)
  813. # [18:39] * Joins: ap_ (n=ap@17.246.19.5)
  814. # [18:42] * ap_ is now known as ap
  815. # [18:42] * Quits: Lachy (n=Lachlan@pat-tdc.opera.com) ("This computer has gone to sleep")
  816. # [18:44] * Joins: dglazkov (n=dglazkov@nat/google/x-usmcxyedntgknjja)
  817. # [18:48] * Joins: cying (n=cying@70.90.171.153)
  818. # [18:51] * Joins: tndH (n=Rob@cpc2-leed18-0-0-cust427.leed.cable.ntl.com)
  819. # [18:53] * Joins: payman (n=payman@pat.se.opera.com)
  820. # [18:55] * Joins: onar (n=onar@nat/apple/x-pezkijvrcnsvufwb)
  821. # [19:05] * Joins: workmad3 (n=workmad3@cpc3-bagu10-0-0-cust651.1-3.cable.virginmedia.com)
  822. # [19:07] * Joins: maikmerten (n=maikmert@port-92-201-94-96.dynamic.qsc.de)
  823. # [19:11] <Philip`> AryehGregor: src is fallback for srcdoc
  824. # [19:11] <AryehGregor> Hmm.
  825. # [19:11] <AryehGregor> Then why bother with srcdoc?
  826. # [19:11] <Philip`> Saves network requests
  827. # [19:12] <AryehGregor> Hmm.
  828. # [19:12] <AryehGregor> I guess that makes sense.
  829. # [19:12] * Joins: dave_levin (n=dave_lev@74.125.59.65)
  830. # [19:13] <AryehGregor> Why would you want to use a sandboxed iframe for any content you know at the time the page is being created, though, rather than whitelisting? Only for apps that are too small to bother with whitelisting?
  831. # [19:13] <AryehGregor> Could this be better solved by improved libraries?
  832. # [19:13] <TabAtkins> AryehGregor: I can't parse your question.
  833. # [19:13] <AryehGregor> TabAtkins, the use of a sandboxed iframe for content that's completely out of your control, like ads, makes sense to me.
  834. # [19:14] <TabAtkins> Ah, k.
  835. # [19:14] <AryehGregor> But to use srcdoc, you need to have the content available to your app anyway. You could just as well do parse and whitelist it.
  836. # [19:14] <AryehGregor> What's a good reason you wouldn't do that?
  837. # [19:14] <Dashiva> AryehGregor: It's hard
  838. # [19:14] <TabAtkins> I'd certainly do that *too*.
  839. # [19:14] <AryehGregor> I can only think of fairly weak reasons, compared to the flexibility of whitelisting.
  840. # [19:14] <TabAtkins> But removing scripting is difficult, while @sandbox handles it securely and trivially.
  841. # [19:14] <Philip`> Whitelisting can be easy
  842. # [19:14] <AryehGregor> Dashiva, so is this only a feature to compensate for the lack of good libraries in any given language?
  843. # [19:15] <Philip`> e.g. if you allow no HTML elements
  844. # [19:15] <Dashiva> AryehGregor: It's not just the whitelisting infrastructure, you also have to know what to whitelist
  845. # [19:15] <Dashiva> A browser knows better what's safe and what isn't
  846. # [19:15] <AryehGregor> Dashiva, a good library could do that well too.
  847. # [19:15] <Philip`> It's probably more compelling when you want a much wider whitelist than most blogs etc typically allow
  848. # [19:15] <AryehGregor> Philip`, MediaWiki has an extremely wide whitelist, but we do still blacklist certain particular things.
  849. # [19:16] <Philip`> like you want people to embed little scripted widgets in their comments, without interfering with the rest of your page
  850. # [19:16] <AryehGregor> For instance, we don't permit <img>, but we do permit style="".
  851. # [19:16] * Quits: Necrathex (n=bleptop@212-123-163-12.ip.telfort.nl)
  852. # [19:16] <AryehGregor> If you want to allow some type of untrusted script, then it makes sense.
  853. # [19:16] <AryehGregor> You can't do server-side whitelisting of nontrivial script.
  854. # [19:16] <AryehGregor> But does anyone actually want this?
  855. # [19:16] <AryehGregor> Has anyone said they'd be interested in using it?
  856. # [19:16] <AryehGregor> The use-cases seem weak.
  857. # [19:16] <Philip`> If you allow style you've got to worry about style="expression(script)" etc and it becomes far more complex
  858. # [19:17] <AryehGregor> Philip`, actually, not that complex at all.
  859. # [19:17] <Philip`> (Do you happen to have a link to Mediawiki's filtering code?)
  860. # [19:17] <AryehGregor> Philip`, grep for "function checkCss". http://svn.wikimedia.org/viewvc/mediawiki/trunk/phase3/includes/Sanitizer.php?view=markup
  861. # [19:17] <Dashiva> AryehGregor: Is there a problem with using sandbox on content you believe to safe, though? Defense in depth.
  862. # [19:17] <AryehGregor> It's blacklist-based, but has worked well for years.
  863. # [19:17] <Dashiva> *to be
  864. # [19:18] <AryehGregor> Dashiva, that seems like a weak use-case. How many people are going to bother to use srcdoc="" just for defense in depth?
  865. # [19:18] <Dashiva> Not just for
  866. # [19:18] <AryehGregor> Does anyone here have any particular cases where they, personally, would actually want to use srcdoc?
  867. # [19:19] <Dashiva> srcdoc has its own uses, e.g. reducing network traffic
  868. # [19:19] <Dashiva> Once you're using srcdoc, sandbox is free
  869. # [19:19] <AryehGregor> By "srcdoc" I mean "sandboxed iframes where you could plausibly use srcdoc".
  870. # [19:19] <AryehGregor> Does anyone have a case where you'd want to use a sandboxed iframe rather than server-side sanitizing? Or in addition to server-side sanitizing?
  871. # [19:20] <AryehGregor> (as opposed to cases where server-side sanitizing is impossible, I agree sandbox makes sense there)
  872. # [19:20] <TabAtkins> I've already provided a case where I'd want to use it in addition to server-side processing.
  873. # [19:20] <AryehGregor> Philip`, eight lines, doesn't seem too complicated. Found any problems with it yet?
  874. # [19:21] * Quits: karlushi (n=karlushi@fw.vdl2.ca) (Read error: 104 (Connection reset by peer))
  875. # [19:21] <AryehGregor> TabAtkins, which is what? And do you want it enough for it to be worth implementers spending time on it rather than other features that give you things you can't have right now at all?
  876. # [19:21] * Joins: karlushi (n=karlushi@fw.vdl2.ca)
  877. # [19:22] <othermaciej> AryehGregor: I do think the case for srcdoc is somewhat weaker than for sandboxed iframes in general
  878. # [19:22] <AryehGregor> Philip`, background-image: attr(title, url) is a problem, but happily, not implemented yet anywhere.
  879. # [19:22] <TabAtkins> Simplest one is trusting that there really is no scripting going on, as history shows that people are very clever at slipping stuff through sanitizers.
  880. # [19:22] <AryehGregor> TabAtkins, I don't think we've ever had anything get through the MediaWiki sanitizer.
  881. # [19:22] <AryehGregor> Not since very early days, anyway.
  882. # [19:23] <TabAtkins> Still, every high-profile XSS case is high-profile precisely because it slipped through sanitizers.
  883. # [19:23] <AryehGregor> We've had the usual XSS stuff, but I don't think any were because of the sanitizer misbehaving.
  884. # [19:23] <AryehGregor> I might be wrong, though.
  885. # [19:23] * karlushi sees big wreckage at the horizon in terms of ugliness of the pages. :) I think we will be surprised by the creativity of people using srcdoc
  886. # [19:23] <othermaciej> one key difference that I guess I have been overlooking is that srcdoc has a different fallback model
  887. # [19:23] <AryehGregor> No, XSS is caused by a totally different failure, usually.
  888. # [19:23] <othermaciej> namely that you get a dead iframe box instead of your desired content
  889. # [19:23] <AryehGregor> XSS is typically when something is being injected into trusted content and isn't escaped at all.
  890. # [19:23] <othermaciej> XSS does in fact occur because of bad sanitizers
  891. # [19:24] <AryehGregor> I'm sure it does sometimes, but that's not the leading cause, unless you construe "sanitizers" very broadly.
  892. # [19:24] <othermaciej> remember the MySpace worm?
  893. # [19:24] <AryehGregor> No, I don't touch social networking sites with a ten-foot barge pole. :P
  894. # [19:24] <othermaciej> http://namb.la/popular/tech.html
  895. # [19:24] <othermaciej> that was a rather spectacular failure of filtering
  896. # [19:26] <othermaciej> I wonder if your favorite content filter has considered this attack vector...
  897. # [19:26] * Quits: GarethAdams|Work (n=GarethAd@pdpc/supporter/active/GarethAdams) (niven.freenode.net irc.freenode.net)
  898. # [19:26] * Quits: Yudai (n=Yudai@p6ea250.kngwnt01.ap.so-net.ne.jp) (niven.freenode.net irc.freenode.net)
  899. # [19:26] * Quits: kinetik (n=kinetik@121.98.132.55) (niven.freenode.net irc.freenode.net)
  900. # [19:26] * Quits: hoodow (n=hoodow@2001:41d0:1:f5e5:0:0:0:666) (niven.freenode.net irc.freenode.net)
  901. # [19:26] * Quits: berny- (i=berny@666.syx.sk) (niven.freenode.net irc.freenode.net)
  902. # [19:26] * Quits: karlcow (n=karl@nerval.la-grange.net) (niven.freenode.net irc.freenode.net)
  903. # [19:26] * Quits: jorlow (n=jorlow@nat/google/x-okxwgwczunehpqcy) (niven.freenode.net irc.freenode.net)
  904. # [19:26] * Quits: webben (n=benjamin@173-45-238-110.slicehost.net) (niven.freenode.net irc.freenode.net)
  905. # [19:26] * Quits: foolip (n=philip@h-63-95.A163.priv.bahnhof.se) (niven.freenode.net irc.freenode.net)
  906. # [19:26] * Quits: deltab (n=deltab@82-46-155-15.cable.ubr02.smal.blueyonder.co.uk) (niven.freenode.net irc.freenode.net)
  907. # [19:26] * Quits: AryehGregor (n=Simetric@mediawiki/simetrical) (niven.freenode.net irc.freenode.net)
  908. # [19:26] * Quits: hendry (n=hendry@webvm.net) (niven.freenode.net irc.freenode.net)
  909. # [19:27] * Joins: Heimidal (n=heimidal@cpe-76-168-254-92.socal.res.rr.com)
  910. # [19:28] * Quits: miketaylr (n=miketayl@38.117.156.163) ("Leaving...")
  911. # [19:30] * Joins: GarethAdams|Work (n=GarethAd@pdpc/supporter/active/GarethAdams)
  912. # [19:32] * Joins: miketaylr (n=miketayl@38.117.156.163)
  913. # [19:34] * Joins: hoodow (n=hoodow@2001:41d0:1:f5e5:0:0:0:666)
  914. # [19:34] * Joins: karlcow (n=karl@nerval.la-grange.net)
  915. # [19:34] * Joins: jorlow (n=jorlow@nat/google/x-okxwgwczunehpqcy)
  916. # [19:34] * Joins: webben (n=benjamin@173-45-238-110.slicehost.net)
  917. # [19:34] * Joins: foolip (n=philip@h-63-95.A163.priv.bahnhof.se)
  918. # [19:34] * Joins: deltab (n=deltab@82-46-155-15.cable.ubr02.smal.blueyonder.co.uk)
  919. # [19:34] * Joins: AryehGregor (n=Simetric@mediawiki/simetrical)
  920. # [19:34] * Joins: hendry (n=hendry@webvm.net)
  921. # [19:34] * Joins: berny- (i=berny@666.syx.sk)
  922. # [19:34] * Parts: adactio (n=adactio@host213-123-197-180.in-addr.btopenworld.com)
  923. # [19:35] * Joins: Yudai (n=Yudai@p6ea250.kngwnt01.ap.so-net.ne.jp)
  924. # [19:35] * Joins: kinetik (n=kinetik@121.98.132.55)
  925. # [19:35] <AryehGregor> othermaciej, IMO, any useful whitelisting system has to whitelist URL protocols.
  926. # [19:35] <AryehGregor> That seems like MySpace's failure here.
  927. # [19:35] <AryehGregor> (MediaWiki simply prohibits URLs everywhere in CSS.)
  928. # [19:35] <AryehGregor> Anyway, yes, whitelisting is hard to get right.
  929. # [19:36] <othermaciej> AryehGregor: I'm betting they did whitelist URL protocols, they just didn't think about URLs inside CSS
  930. # [19:36] <AryehGregor> So I guess some people might want to use srcdoc.
  931. # [19:36] <othermaciej> point is, a sandboxed iframe would have neutralized this attack
  932. # [19:36] <othermaciej> (I'm not sure that you'd specifically need srcdoc for it)
  933. # [19:36] <AryehGregor> It depends how much was sandboxed, no?
  934. # [19:36] <AryehGregor> Where was the code injected, exactly?
  935. # [19:36] <othermaciej> In a user's profile page (controlled by that user)
  936. # [19:37] * Quits: dbaron (n=dbaron@c-98-234-51-190.hsd1.ca.comcast.net) ("8403864 bytes have been tenured, next gc will be global.")
  937. # [19:37] <othermaciej> in one of the many parts where MySpace lets you provide the content
  938. # [19:37] <AryehGregor> I guess it doesn't matter, you just have to split it up into "script allowed" and "script not allowed" and make sure all user-provided content is in the latter pigeonhole.
  939. # [19:37] <othermaciej> social networks are probably a more realistic and interesting use case for sandboxed iframes than blog comments
  940. # [19:37] <AryehGregor> Wikis would be similar.
  941. # [19:39] <othermaciej> in fact, even a sandboxed iframe with allow-script on would have prevented the worm aspects of this attack
  942. # [19:40] <othermaciej> and this is just one of the most well known breakdowns of whitelisting because it got so bad that it affected backbone traffic....
  943. # [19:40] <TabAtkins> Argh, all I want for Xmas is a way to link a <input type=file> to a <progress> trivially and declaratively.
  944. # [19:40] <AryehGregor> Okay, so this has some reasonable uses.
  945. # [19:40] <AryehGregor> TabAtkins, that would be cool.
  946. # [19:41] <AryehGregor> It would actually make <progress> useful. :P
  947. # [19:41] <TabAtkins> I keep having to screw around with various different uploaders solely so I can provide a progress bar, and none of them are without issues.
  948. # [19:41] <AryehGregor> Well, I guess <progress> isn't really useful until it's style-able.
  949. # [19:41] <AryehGregor> What I want to know is, why the heck don't browsers provide progress bars for uploads themselves?
  950. # [19:42] <AryehGregor> They provide them for downloads.
  951. # [19:42] <TabAtkins> I don't care all that much, actually. Set the attributes on it, and fire progress events that I can capture to handle the styling myself.
  952. # [19:42] * Joins: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz)
  953. # [19:42] * Quits: mackstann (n=death@216-20-152-177-dsl.hevanet.com) (Read error: 113 (No route to host))
  954. # [19:43] <TabAtkins> Seriously, some simple upload indicator in the browser UI would fit my needs perfectly too. I just can't have customers uploading 50+MB files without some progress indicator.
  955. # [19:43] * Joins: Bo (n=chatzill@unaffiliated/bo7)
  956. # [19:43] <AryehGregor> https://bugzilla.mozilla.org/show_bug.cgi?id=249338
  957. # [19:43] * Joins: drunknbass_work (n=aaron@71.107.253.243)
  958. # [19:44] <othermaciej> if you are willing to do all the drawing of the progress bar completely yourself, then at least in Safari you can give good progress UI
  959. # [19:44] <othermaciej> just use <input type=file> to pick one or more files, and XHR to upload, and listen for its progress events
  960. # [19:46] <AryehGregor> Would that work in any browser supporting the File API?
  961. # [19:46] <TabAtkins> Looks like it works in FF too.
  962. # [19:47] <TabAtkins> But, of course, I need IE7 support.
  963. # [19:47] * Quits: workmad3 (n=workmad3@cpc3-bagu10-0-0-cust651.1-3.cable.virginmedia.com) (Remote closed the connection)
  964. # [19:47] * Quits: Bo (n=chatzill@unaffiliated/bo7) ("ChatZilla 0.9.86 [Firefox 3.6/20100115144158]")
  965. # [19:47] * Joins: Bo (n=chatzill@unaffiliated/bo7)
  966. # [19:52] <TabAtkins> Hm, apparently YUI can handle it. Interesting.
  967. # [19:53] <AryehGregor> In pure JS? How, I wonder?
  968. # [19:53] <TabAtkins> That's a great question.
  969. # [19:53] <Bo> Hi! how's html5 going? will it make flash extinct?
  970. # [19:53] <AryehGregor> Bo, yes, just give it a few years.
  971. # [19:53] <Bo> cool! good luck guys!
  972. # [19:54] <AryehGregor> I predict that in two years, normal people using new browsers won't need to have Flash installed.
  973. # [19:54] * AryehGregor just made up that prediction off the top of his head
  974. # [19:54] <AryehGregor> To be fair, I should check whether I was right.
  975. # [19:55] <AryehGregor> $ at January 25, 2012
  976. # [19:55] <AryehGregor> warning: commands will be executed using /bin/sh
  977. # [19:55] <AryehGregor> at> echo "Right or wrong? #whatwg [100125 13:52:46] <AryehGregor> I predict that in two years, normal people using new browsers won't need to have Flash installed."
  978. # [19:55] <AryehGregor> at> <EOT>
  979. # [19:55] <AryehGregor> job 102 at Wed Jan 25 13:53:00 2012
  980. # [20:00] <othermaciej> AryehGregor: it would work in any browser supporting enough of the File API
  981. # [20:00] <othermaciej> TabAtkins: I bet YUI uses Flash
  982. # [20:01] <othermaciej> TabAtkins: Flash is (sadly) the canonical solution for AJAXey file upload, upload progress, and e.g. multi-file selection
  983. # [20:01] <TabAtkins> I know - that's what I'm using now, but apparently not a good one.
  984. # [20:01] * Joins: jwalden (n=waldo@64.9.241.104)
  985. # [20:03] * Parts: Bo (n=chatzill@unaffiliated/bo7)
  986. # [20:04] <othermaciej> it would be nice to have a JS lib that can use HTML5 + XHR2 when available and fall back to Flash
  987. # [20:04] <TabAtkins> Indeed.
  988. # [20:06] <TabAtkins> Huh. nixbox.com/demos/jquery-uploadprogress.php doesn't seem to use any flash, and it works in IE8 at least.
  989. # [20:07] <AryehGregor> Java?
  990. # [20:07] <TabAtkins> Nah, php.
  991. # [20:07] <AryehGregor> I mean: client-side Java?
  992. # [20:07] <TabAtkins> Ah, it uses an uploadprogress PECL plugin.
  993. # [20:07] <AryehGregor> (instead of Flash)
  994. # [20:07] <AryehGregor> Oh, I see.
  995. # [20:07] <AryehGregor> Right, that works.
  996. # [20:08] <AryehGregor> You could just get the upload progress from the server.
  997. # [20:08] <AryehGregor> Kind of stupid, but . . .
  998. # [20:08] <TabAtkins> Yeah, but you can't do that by default with PHP. It slurps the whole request before running the destination script.
  999. # [20:08] <AryehGregor> Right, but I mean in principle, that's an alternate approach you could take.
  1000. # [20:09] <TabAtkins> I have a working uploader that uses perl to do it, but I had way too many problems getting it to run.
  1001. # [20:09] <AryehGregor> Since you often control the server completely.
  1002. # [20:09] <AryehGregor> So you can deploy whatever you want there, in theory.
  1003. # [20:09] * Joins: maikmerten_ (n=maikmert@port-92-201-56-177.dynamic.qsc.de)
  1004. # [20:10] * Joins: roc (n=roc@121-74-157-214.telstraclear.net)
  1005. # [20:14] <erlehmann> gsnedders, you should blog moar. me likey
  1006. # [20:15] * Joins: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net)
  1007. # [20:18] * Joins: nessy (n=Adium@124-171-43-189.dyn.iinet.net.au)
  1008. # [20:22] <AryehGregor> gsnedders.com? What a horrible misuse of the TLD for US commercial websites.
  1009. # [20:24] * Quits: maikmerten (n=maikmert@port-92-201-94-96.dynamic.qsc.de) (Read error: 110 (Connection timed out))
  1010. # [20:24] * Joins: Lachy (n=Lachlan@85.196.122.246)
  1011. # [20:28] * Quits: cpearce (n=cpearce@ip-118-90-22-222.xdsl.xnet.co.nz) ("ChatZilla 0.9.86-rdmsoft [XULRunner 1.9.0.15/2009101909]")
  1012. # [20:30] * Quits: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  1013. # [20:31] * Joins: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net)
  1014. # [20:34] * Quits: othermaciej (n=mjs@c-69-181-42-237.hsd1.ca.comcast.net) (Client Quit)
  1015. # [21:01] * Joins: cpearce (n=cpearce@203-97-204-82.dsl.clear.net.nz)
  1016. # [21:04] * Quits: maikmerten_ (n=maikmert@port-92-201-56-177.dynamic.qsc.de) (Remote closed the connection)
  1017. # [21:06] * Joins: Chris|UNC (n=blahness@152.2.194.196)
  1018. # [21:08] * Joins: breakmau5 (n=breakz@erft-4db7ca93.pool.mediaWays.net)
  1019. # [21:27] * Quits: roc (n=roc@121-74-157-214.telstraclear.net)
  1020. # [21:27] * Joins: dbaron (n=dbaron@nat/mozilla/x-bxmiubjyvcrxmaas)
  1021. # [21:42] * Joins: danbri (n=danbri@unaffiliated/danbri)
  1022. # [21:46] * Quits: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net) ("Leaving...")
  1023. # [21:47] * Joins: kmartiin (n=kmartiin@p57AC6C99.dip.t-dialin.net)
  1024. # [21:48] * Joins: jwalden_ (n=waldo@nat/mozilla/x-nithsmcknuvndlge)
  1025. # [21:49] * Chris|UNC is now known as ChrisLTD|Work
  1026. # [21:56] * Quits: ttepasse (n=ttepas--@ip-95-222-120-117.unitymediagroup.de) ("404")
  1027. # [21:58] * Joins: Rik` (n=Rik`@pha75-2-81-57-187-57.fbx.proxad.net)
  1028. # [22:02] * Quits: jwalden (n=waldo@64.9.241.104) (Read error: 113 (No route to host))
  1029. # [22:04] * Quits: onar (n=onar@nat/apple/x-pezkijvrcnsvufwb) (Read error: 104 (Connection reset by peer))
  1030. # [22:04] * Joins: onar (n=onar@nat/apple/x-izapssaokrvmbzui)
  1031. # [22:05] <TabAtkins> AryehGregor: I put up some ideas for improving sandbox for comment use. Can you see any other major areas we could possibly hit, based on your mx experience?
  1032. # [22:05] <TabAtkins> s/mx/mw/
  1033. # [22:05] <AryehGregor> TabAtkins, I'll probably look at my spec e-mail tomorrow.
  1034. # [22:06] <TabAtkins> k. just for reference, it's in the whatwg thread about sandbox.
  1035. # [22:07] * Quits: ROBOd (n=robod@89.122.216.38) ("http://www.robodesign.ro")
  1036. # [22:07] * Joins: roc (n=roc@203-97-204-82.dsl.clear.net.nz)
  1037. # [22:08] * Quits: pmuellr (n=pmuellr@nat/ibm/x-hlilhgmebyopabyv)
  1038. # [22:09] * Lachy *facepalms*
  1039. # [22:09] <Lachy> Where on earth did anyone get the idea that sandboxing had anything at all to do with protecting against SQL injection?
  1040. # [22:09] <TabAtkins> From Shelley.
  1041. # [22:09] <TabAtkins> And now she's confused Leif.
  1042. # [22:09] <Lachy> yeah, but where the hell did she get it from?!
  1043. # [22:09] <TabAtkins> I have no idea.
  1044. # [22:10] <Lachy> it's as if they have no clue about the security issues involved, and are just arging for the sake of arguing
  1045. # [22:10] <Lachy> and also, why are all the arguments that are supposedly against srcdoc, actually solely focussed on sandbox?
  1046. # [22:10] <TabAtkins> Because of your previous line.
  1047. # [22:12] <Lachy> well, the one argument against srcdoc is that markup in attriubtes is an anti-pattern, which is somewhat true, but unavoidable in this case.
  1048. # [22:12] <AryehGregor> The other question is how useful it is, really.
  1049. # [22:13] <AryehGregor> Anyway, seriously. If someone is posting things that don't make much sense, don't respond to them. If they make any good points, someone else will make them too, and you can respond to the other person.
  1050. # [22:13] * Quits: roc (n=roc@203-97-204-82.dsl.clear.net.nz)
  1051. # [22:13] <AryehGregor> There's no point in getting into a debate where both sides are talking past each other.
  1052. # [22:14] <TabAtkins> Markup in attributes is an anti-pattern, but I'm not seeing why data: urls are any better. Same thing, just a different attribute and different escaping requirements.
  1053. # [22:14] <Lachy> wow. It looks like Shelley doesn't even understand what SQL injection actually is.
  1054. # [22:14] * Joins: roc (n=roc@203-97-204-82.dsl.clear.net.nz)
  1055. # [22:15] <AryehGregor> She doesn't do server-side development, does she?
  1056. # [22:15] <Lachy> or, at least, she's confusing SQL injection with embedding malicious client side scripts in user input
  1057. # [22:15] <Lachy> I don't know what she does.
  1058. # [22:16] * Quits: mlpug (n=mlpug@a88-115-164-40.elisa-laajakaista.fi) (Remote closed the connection)
  1059. # [22:17] * Quits: miketaylr (n=miketayl@38.117.156.163) (Remote closed the connection)
  1060. # [22:19] <TabAtkins> Restarting apache is enough to get php.ini changes to be recognized, right?
  1061. # [22:23] <Philip`> TabAtkins: No, you have to format your disk and reinstall from scratch
  1062. # [22:23] <TabAtkins> Philip`: Damn, okay.
  1063. # [22:25] <Philip`> (I'd expect it to be fine with just a "apachectl graceful", though maybe PHP is stupid and doesn't work with that)
  1064. # [22:25] * Joins: miketaylr (n=miketayl@38.117.156.163)
  1065. # [22:34] <AryehGregor> It does.
  1066. # [22:34] <AryehGregor> graceful restarts everything, it just lets all currently-running requests run to completion before replacing their worker process.
  1067. # [22:40] <Lachy> are there any use cases for srcdoc that wouldn't call for sandboxing too?
  1068. # [22:40] <TabAtkins> Not really, I think.
  1069. # [22:41] <Philip`> You could use it to reset styles
  1070. # [22:42] <Philip`> or to do little scrolly windows without having to learn the CSS syntax for it
  1071. # [22:42] * erlehmann is now known as erduschmann
  1072. # [22:44] <Philip`> You could use it for pages containing lots of test cases that run independently
  1073. # [22:47] <AryehGregor> In other words, no. :P
  1074. # [22:52] <Lachy> using it to reset styles doesn't seem like a compelling use case, since you'd most likely want to specify it with seamless, so that the parent document's styles are applied to the iframe's srcdoc document.
  1075. # [22:53] <Lachy> if you don't specify seamless, then you just get an ordinary iframe
  1076. # [22:54] <Philip`> You get an ordinary iframe without the effort of making a separate file for it
  1077. # [22:57] * Joins: pham (i=foobar@174-21-110-160.tukw.qwest.net)
  1078. # [22:57] * Quits: ChrisLTD|Work (n=blahness@152.2.194.196)
  1079. # [22:58] * erduschmann is now known as erlehmann
  1080. # [23:01] * Joins: workmad3 (n=workmad3@cpc3-bagu10-0-0-cust651.1-3.cable.virginmedia.com)
  1081. # [23:02] * Joins: pham__ (i=foobar@174-21-110-160.tukw.qwest.net)
  1082. # [23:02] <erlehmann> TabAtkins, may I ask what problem srcdoc solves that data URIs don't ?
  1083. # [23:02] <erlehmann> I mean, I read the example but am obviously a bit confused.
  1084. # [23:02] * Quits: jwalden_ (n=waldo@nat/mozilla/x-nithsmcknuvndlge) (Client Quit)
  1085. # [23:03] <TabAtkins> They solve the same problem, but data urls are slightly different in ways that are annoying.
  1086. # [23:04] <erlehmann> Okay. Thought I had missed a beat or something.
  1087. # [23:05] * Joins: jwalden (n=waldo@nat/mozilla/x-fyxnamnaqcphiyjl)
  1088. # [23:08] * Quits: pham_ (i=foobar@174-21-104-229.tukw.qwest.net) (Read error: 110 (Connection timed out))
  1089. # [23:09] * Quits: miketaylr (n=miketayl@38.117.156.163) ("Leaving...")
  1090. # [23:11] * Quits: erlehmann (n=erlehman@82.113.121.109) ("Ex-Chat")
  1091. # [23:14] * Quits: pham (i=foobar@174-21-110-160.tukw.qwest.net) (Connection timed out)
  1092. # [23:16] * Quits: Maurice (i=copyman@5ED548D4.cable.ziggo.nl)
  1093. # [23:19] * Quits: Heimidal (n=heimidal@unaffiliated/heimidal) (Remote closed the connection)
  1094. # [23:20] * Quits: Rik` (n=Rik`@pha75-2-81-57-187-57.fbx.proxad.net) (Remote closed the connection)
  1095. # [23:20] * Joins: Rik` (n=Rik`@pha75-2-81-57-187-57.fbx.proxad.net)
  1096. # [23:22] * Quits: AlicanC (n=alicancu@78.179.249.98)
  1097. # [23:25] * Joins: tametick (n=chatzill@chello084114134061.3.15.vie.surfer.at)
  1098. # [23:29] * Joins: Heimidal (n=heimidal@cpe-76-168-254-92.socal.res.rr.com)
  1099. # [23:29] * Joins: aroben (n=aroben@unaffiliated/aroben)
  1100. # [23:36] * Quits: BlurstOfTimes (n=blurstof@168.203.117.66) (Client Quit)
  1101. # [23:36] * Joins: nattokirai (n=nattokir@y224241.dynamic.ppp.asahi-net.or.jp)
  1102. # [23:39] * Joins: Guest88730 (i=beos@81-233-16-19-no30.tbcn.telia.com)
  1103. # [23:40] * Quits: karlushi (n=karlushi@fw.vdl2.ca) (Read error: 60 (Operation timed out))
  1104. # [23:40] * Quits: jwalden (n=waldo@nat/mozilla/x-fyxnamnaqcphiyjl) ("ChatZilla 0.9.85-rdmsoft [XULRunner 1.9.1.6/20100107113701]")
  1105. # [23:40] * Joins: karlushi (n=karlushi@fw.vdl2.ca)
  1106. # [23:43] * Quits: svl (n=me@ip565744a7.direct-adsl.nl) ("And back he spurred like a madman, shrieking a curse to the sky.")
  1107. # [23:44] * Quits: starjive (i=beos@81-233-16-19-no30.tbcn.telia.com) (Read error: 60 (Operation timed out))
  1108. # [23:45] * Quits: JonathanNeal (n=Jonathan@rrcs-76-79-114-213.west.biz.rr.com) (Read error: 110 (Connection timed out))
  1109. # [23:52] * Joins: othermaciej (n=mjs@12.44.174.3)
  1110. # [23:57] * Quits: nattokirai (n=nattokir@y224241.dynamic.ppp.asahi-net.or.jp)
  1111. # [23:59] * Quits: workmad3 (n=workmad3@cpc3-bagu10-0-0-cust651.1-3.cable.virginmedia.com) (Remote closed the connection)
  1112. # Session Close: Tue Jan 26 00:00:00 2010

The end :)