2006-06-30T01:52:41 <mvirkkil> ok. now I've got book building fixed (it gets all the images and the docbook in to a zip). The formatter can also handle entities (like "ä") which was a bug I found in the wiki. I've written a kludge for the Include macro, and also the Insert macro is almost done.
2006-06-30T01:53:40 <mvirkkil> Or it is done, but I want to add a special title= attribute I need for nicer inserting of stuff.
2006-06-30T01:54:50 <mvirkkil> All and all, I'm getting really close to having all the features for going moinmoing->docbook. I'd still like to write the admonition macro, maybe I'll do that next.
2006-06-30T08:40:29 <xorAxAx> nwp_: ping
2006-06-30T13:14:11 <ThomasWaldmann> mvirkkil: hg.thinkmo.de tells your last push is ~3 weeks ago
2006-06-30T13:18:40 <ThomasWaldmann> fpletz_: + # XXX: why?
2006-06-30T13:18:40 <ThomasWaldmann> + #def test(self, request):
2006-06-30T13:19:01 <ThomasWaldmann> in search.Xapian -> you can remove this, it is just some early test code
2006-06-30T13:23:54 <ThomasWaldmann> fpletz: searchresult = search.searchPages(request, 't:"%s"' % name) if you touch such stuff, maybe fix it to use "title:..." in case we will have some other prefix starting with "t" sometime soon
2006-06-30T13:27:39 <ThomasWaldmann> fpletz_: file/directory structure looks much better now
2006-06-30T14:15:36 <ThomasWaldmann> xorAxAx: why is it more insecure?
2006-06-30T14:15:57 <ThomasWaldmann> is there something like "more insecure than not secure"? :)
2006-06-30T14:16:13 <xorAxAx> yep! it broadcasts the username also
2006-06-30T14:16:28 <ThomasWaldmann> why is that insecure?
2006-06-30T14:16:42 <xorAxAx> so you could collect all cookies, order them by name and trivially determine how it will log you in without even contacting the wiki
2006-06-30T14:17:39 <ThomasWaldmann> if you have an old cookie, you can log in, too
2006-06-30T14:19:08 <xorAxAx> yep!
2006-06-30T14:19:28 <xorAxAx> but i dont see the advantages of having this admittedly complex hashing code
2006-06-30T14:19:33 <mvirkkil> ThomasWaldmann: I'll start pushing things this weekend.
2006-06-30T14:20:27 <mvirkkil> ThomasWaldmann: I've finished Insert-macro, BuildBook-action, Admonition-macro and fixed a number of bugs in the formatter (like html entities)
2006-06-30T14:22:17 <mvirkkil> ThomasWaldmann: I'll push everything separately. There's a bugfix for Page.py which is important to me to get accepted, so I'll bother Kepplar about it.
2006-06-30T14:24:09 <mvirkkil> ThomasWaldmann: I'm still thinkin about wheter or not keep the docbook-book-formatter separate from the regular formatter or not.
2006-06-30T14:24:39 <mvirkkil> ThomasWaldmann: How can I split separate parts of the formatter up in to separate files cleanly? ie. where should I place the files?
2006-06-30T14:26:03 <xorAxAx> mvirkkil: i dont think that anything would mind having you creating subdirs below MoinMoin/formatter
2006-06-30T14:29:45 <mvirkkil> xorAxAx: Ok. I really feel that the formatter is growing too large, so if I find more stuff that I'll need to add to it, I'll split it up.
2006-06-30T14:30:45 <xorAxAx> yeah, good idea
2006-06-30T14:33:59 <ThomasWaldmann> xorAxAx: the cookie code can be more secure when we add time information to it, as author already noted in the code
2006-06-30T14:34:17 <ThomasWaldmann> that doesn't need to hold you back, though
2006-06-30T14:34:40 <xorAxAx> even time information is worth nothing as this is no session system :)
2006-06-30T14:34:52 <xorAxAx> i thought if implementing one fits into my scope
2006-06-30T14:35:06 <xorAxAx> but i refused to spend more time on sync issues
2006-06-30T14:35:23 <xorAxAx> umm, refused in order to, i mean
2006-06-30T14:36:26 <ThomasWaldmann> as I said, that is no blocker for you starting implementing sync
2006-06-30T14:37:31 <xorAxAx> no, you are right, but it blocks me implementing a secure authentication. and i have already put simple cookie auth into place
2006-06-30T14:38:03 <xorAxAx> i.e. you can have authentication using wikirpc ;)
2006-06-30T15:11:07 * Kepplar returns from lunch
2006-06-30T15:11:09 <Kepplar> hey
2006-06-30T15:12:03 <mvirkkil> Kepplar: hi :)
2006-06-30T16:30:32 <Kepplar> mmm
2006-06-30T16:33:52 <mvirkkil> Kepplar: My change to Page.py http://hg.thinkmo.de/moin/1.6-docbook-mvirkkil?cs=26a8f963474c
2006-06-30T16:34:33 <mvirkkil> seems my texteditor messed the ü to an ö
2006-06-30T16:34:47 <xorAxAx> LOL
2006-06-30T16:35:07 <xorAxAx> thats a funny bug, which editor do you use?
2006-06-30T16:35:16 <Kepplar> mvirkkil: already seen it :)
2006-06-30T16:35:29 <Kepplar> hey guys seen the new google competition
2006-06-30T16:35:30 <Kepplar> ?
2006-06-30T16:35:35 <xorAxAx> no
2006-06-30T16:35:48 <Kepplar> 1 month to write a new google desktop widget thing
2006-06-30T16:35:51 <Kepplar> 3 cash prizes
2006-06-30T16:35:59 <Kepplar> and all published work gets a free tshirt
2006-06-30T16:36:19 <mvirkkil> Well, I'm up to my ears in work already.
2006-06-30T16:36:30 <Kepplar> well yea we cant do it
2006-06-30T19:31:15 <richardb> fpletz_: how's it going?
2006-06-30T20:09:04 <richardb> ThomasWaldmann: are you around?
2006-06-30T20:13:06 <Kepplar> hey richardb
2006-06-30T20:13:13 <richardb> hi
2006-06-30T20:13:27 <richardb> how's your stuff going?
2006-06-30T20:13:42 <Kepplar> not bad thanks, ahead of schedule i believe
2006-06-30T20:13:48 <ThomasWaldmann> richardb: yes
2006-06-30T20:13:56 <richardb> Kepplar: Well done. :)
2006-06-30T20:14:10 <Kepplar> didnt go according to plan - intergration is delayed compared to original plan because not using the original interfaces :)
2006-06-30T20:14:24 <Kepplar> but actual implementation is ahead :)
2006-06-30T20:14:25 <richardb> ThomasWaldmann: you suggested meeting around now to discuss the midterm survey...
2006-06-30T20:14:28 <Kepplar> richardb: thanks :)
2006-06-30T20:14:51 <ThomasWaldmann> richardb: just a moment
2006-06-30T20:15:24 <richardb> I'm around until ... around 19:00 UTC.
2006-06-30T20:34:04 <Kepplar> ThomasWaldmann: what does the header regex in Page actually do - theres no definition of a header -- mimetype perchance?
2006-06-30T20:34:24 <ThomasWaldmann> Kepplar: wait, /me busy
2006-06-30T20:34:31 <Kepplar> ok
2006-06-30T20:34:42 <Kepplar> just prod, im i dont respond instantly its because im making dinner
2006-06-30T20:34:47 <Kepplar> if*
2006-06-30T21:30:10 * xorAxAx has just printed his moinmoin business card :)
2006-06-30T21:33:19 <ThomasWaldmann> good idea. can you make some more?
2006-06-30T21:33:34 <ThomasWaldmann> I have BCs, but not moin specific ones.
2006-06-30T21:34:47 <ThomasWaldmann> Kepplar: now I am here
2006-06-30T21:44:06 <xorAxAx> ThomasWaldmann: i sent you a mail, please fill in your data
2006-06-30T21:44:18 <xorAxAx> note that the logo will be black/white only
2006-06-30T21:44:27 <xorAxAx> (which is a hidden sign for "sponsor us")
2006-06-30T22:15:56 <ThomasWaldmann> hehe
2006-06-30T22:22:54 <ThomasWaldmann> sent
2006-06-30T22:44:29 <xorAxAx> now the question is if those html files have access to the outer document and could e.g. steal cookies there
2006-06-30T22:44:33 <xorAxAx> ThomasWaldmann: wrong channel :)
2006-06-30T22:45:00 <ThomasWaldmann> waldi is not here
2006-06-30T22:45:27 <ThomasWaldmann> maybe not there, too
2006-06-30T22:45:46 <xorAxAx> and object can be used to start applications on windows: http://www.greymagic.com/security/advisories/gm001-ie/
2006-06-30T22:45:49 <xorAxAx> :)
2006-06-30T22:45:51 <ThomasWaldmann> dreimark: is it possible to embed html with EO?
2006-06-30T22:46:06 <ThomasWaldmann> xorAxAx: sure
2006-06-30T22:46:11 <dreimark> I do check the mimetype
2006-06-30T22:47:47 <dreimark> mime_type, enc = mimetypes.guess_type(attname)
2006-06-30T22:47:51 <dreimark> if mime_type == "application/x-shockwave-flash":
2006-06-30T22:47:56 <dreimark> elif mime_type == "image/svg+xml":
2006-06-30T22:48:00 <dreimark> elif mime_type == "application/pdf":
2006-06-30T22:48:05 <dreimark> elif mime_type == "audio/mpeg":
2006-06-30T22:48:10 <dreimark> elif mime_type == "application/vision":
2006-06-30T22:48:13 <xorAxAx> hmm, ok
2006-06-30T22:48:38 <xorAxAx> so what if you give him a svg+xml file that contains html?
2006-06-30T22:48:49 <xorAxAx> or something like that :)
2006-06-30T22:48:59 <xorAxAx> but i think it is safe enough to ship
2006-06-30T22:53:58 <ThomasWaldmann> ok, so i add it to 1.5 and 1.6 branch
2006-06-30T22:54:09 <dreimark> fine
2006-06-30T22:57:12 <xorAxAx> why to 1.5?
2006-06-30T22:57:26 <dreimark> xorAxAx: do you use this vision product of MS
2006-06-30T22:57:33 <xorAxAx> dreimark: yes
2006-06-30T22:57:49 <dreimark> can you check the mimetype working
2006-06-30T22:57:56 <xorAxAx> working?
2006-06-30T22:58:04 <dreimark> if it is the right one
2006-06-30T22:58:08 <xorAxAx> the mimetype is determined by python :)
2006-06-30T22:58:27 <dreimark> yes, but I don't have a file so I can`t test this
2006-06-30T22:59:22 <xorAxAx> python's code doesnt know vsd --> it will give me octet stream etc.
2006-06-30T22:59:30 <xorAxAx> on windows!
2006-06-30T23:00:00 <xorAxAx> on linux, you will get
2006-06-30T23:00:01 <xorAxAx> application/vnd.visio vsd
2006-06-30T23:02:28 <dreimark> ThomasWaldmann:can you please change the elif mime_type == "application/vision" to application/vnd.visio
2006-06-30T23:03:51 <ThomasWaldmann> ok
MoinMoin: MoinMoinChat/Logs/moin-dev/2006-06-30 (last edited 2007-10-29 19:12:04 by localhost)
