[GMG-Devel] GMG Bug Triage Day (Thu August 27, 2015 00:00)

GNU MediaGoblin Bug Triage Day

Where: IRC #mediagoblin on irc.freenode.net
When: All day long

Help us triage bugs! Find bugs that are old, forgotten, unverified and in other states of
not-quite-doneness. Help them on their way by giving them a friendly nudge!

Issue tracker: http://issues.mediagoblin.org/

Wiki page: http://wiki.mediagoblin.org/BugTriageDay

Join us as we scour the GNU MediaGoblin issue tracker for bugs that need some help.

Bug Triage Day is a bi-weekly meeting every other Thursday.
ayleph | 24 Aug 09:07 2015

[GMG-Devel] Patches for blog media_type

Hi gang,

I've got a number of small patches for the blog media_type that I'm
hoping to roll into a branch for review soon. I'd like some feedback on
my solution to one of the issues, explained below. There's also a Trac
ticket for this issue, but there's not much content on the ticket yet.

https://issues.mediagoblin.org/ticket/5316

The most annoying blog issue at the moment is that a user is allowed to
create a blog or blogpost with no title, which generates an empty slug
and causes a server crash when someone tries to access that blog or
blogpost. I've made a small change to fix this on my instance.

mediagoblin/media_types/blog/views.py:

- blog.title = six.text_type(form.title.data)
+ blog.title = (six.text_type(form.title.data) or u'untitled blog')

- blogpost.title = six.text_type(form.title.data)
+ blogpost.title = (six.text_type(form.title.data) or u'untitled blog post')

I have two questions about this approach.

1. Does it seem acceptable to default to a text string like this, or
would we rather just have some UUID-gen string? Note that if I make
multiple blogs or blogposts with the same title, the successive slugs do
get a generated bit tacked on to the end, so there's no issue with
defaulting to the same string for every blog or blogpost.
2. If the above approach sounds good, should I make the default strings
(Continue reading)

ayleph | 24 Aug 06:00 2015

[GMG-Devel] Patches and ticket updates

I see that Sturm has been quite active on Trac lately, adding comments
and patches for some older tickets. I'd like to see these changes get
reviewed and if applicable captured in the code before they're
forgotten. I think berker offered to review some of these tickets, so
I'm going to start CC'ing berker on tickets for review.

If anyone else is interested in taking a look at some of these tickets,
the following query may be useful.

https://issues.mediagoblin.org/query?status=review&changetime=Aug+1%2C+2015..Aug+31%2C+2015&col=id&col=summary&col=status&col=type&col=priority&col=milestone&col=component&order=priority

--

-- 
ayleph

[GMG-Devel] GMG Bug Triage Day (Thu August 13, 2015 00:00)

GNU MediaGoblin Bug Triage Day

Where: IRC #mediagoblin on irc.freenode.net
When: All day long

Help us triage bugs! Find bugs that are old, forgotten, unverified and in other states of
not-quite-doneness. Help them on their way by giving them a friendly nudge!

Issue tracker: http://issues.mediagoblin.org/

Wiki page: http://wiki.mediagoblin.org/BugTriageDay

Join us as we scour the GNU MediaGoblin issue tracker for bugs that need some help.

Bug Triage Day is a bi-weekly meeting every other Thursday.
joakim | 8 Aug 12:51 2015
Picon

[GMG-Devel] docker + mediagoblin?

I would like to use Docker for my next mediagoblin install.

I find several attempts at a dockerfile for mediagoblin while searching,
but they don't seem up to date.

Are there any known up to date dockerfiles for mediagoblin, or should I
do my own from scratch?

--

-- 
Joakim Verona
Amelia Rose Khan | 3 Aug 22:47 2015
Picon

[GMG-Devel] Focusing on 0.9.0 Tickets

Hello all,

During the meeting last Saturday, one of the agenda items was about dealing with tickets in 0.9.0.  The solution was to focus on the these tickets and try to get some of them done.

The timeline for the release of 0.9.0 is this fall, and that means moving forward on tickets in the next release are key.

Let me know if you can tackle a ticket that is assigned for 0.9.0.

Amelia Rose (First Name)
_______________________________________________
devel mailing list
devel@...
http://lists.mediagoblin.org/listinfo/devel
Dylan Jeffers | 31 Jul 07:28 2015

[GMG-Devel] MediaGoblin Instance Media Display Errors

Hi all,

I have set up my server to host a MediaGoblin instance with the
guidelines specified in
http://mediagoblin.readthedocs.org/en/stable/siteadmin/deploying.html,
but am experiencing a technical difficulty. I can upload media fine, but
I can not view them afterwards--a broken page item appears where the
media should be. I spoke with ayleph earlier today who explained it may
be due to an improperly set nginx conf file, or an improper file
permissions, among other things. I have attached the conf file for
review, and also made sure that the user_dev file has chmod 750 with the
mediagoblin user. Are there any other files that I should check for?

The only error that appears in my console is the following:
(From SQlAlchemy) SAWarning: Unicode type received non-unicode bind
param value

A check online gave me mixed results, with many people thinking that it
was unimportant.

Regardless, I would love to get this figured out so I can work closely
with a MediaGoblin instance while I work on Goblinoid.

Let me know if there is any other information that you would like me to
provide.

Best,
Dylan

server_names_hash_bucket_size 64;

server {
		 #################################################
		 # Stock useful config options, but ignore them :)
		 #################################################
		 include /etc/nginx/mime.types;

		 autoindex off;
		 default_type  application/octet-stream;
		 sendfile on;

		 # Gzip
		 gzip on;
		 gzip_min_length 1024;
		 gzip_buffers 4 32k;
		 gzip_types text/plain application/x-javascript text/javascript text/xml text/css;

		 #####################################
		 # Mounting MediaGoblin stuff
		 # This is the section you should read
		 #####################################

		 # Change this to update the upload size limit for your users
		 client_max_body_size 8m;

		 # prevent attacks (someone uploading a .txt file that the browser
		 # interprets as an HTML file, etc.)
		 add_header X-Content-Type-Options nosniff;

		 server_name mediagoblin.sapientechnology.com www.mediagoblin.sapientechnology.com;
		 access_log /var/log/nginx/mediagoblin.sapientech.access.log;
		 error_log /var/log/nginx/mediagoblin.sapientech.error.log;

		 # MediaGoblin's stock static files: CSS, JS, etc.
		 location /mgoblin_static/ {

		    alias /goblin-server/mediagoblin.sapientech.org/mediagoblin/mediagoblin/static/;
		 }

		 # Instance specific mediagoblin:
		 location /mgoblin_media/ {
		    alias /goblin-server/mediagoblin.sapientech.org/mediagoblin/user_dev/mediagoblin/public/;
		 }

		 # Theme static files (usually symlinked in)
		 location /theme_static/ {
		    alias /goblin-server/mediagoblin.sapientech.org/mediagoblin/user_dev/theme_static/;
		 }

		 # Plugin static files (usually symlinked in)
		 location /plugin_static/ {
		    alias /goblin-server/mediagoblin.sapientech.org/mediagoblin/user_dev/plugin_static/;
		 }

		 # Mounting MediaGoblin itself via FastCGI.
		 location / {
		    fastcgi_pass 127.0.0.1:26543;
		    include /etc/nginx/fastcgi_params;

		    # our understanding vs nginx's handling of script_name vs
		    # path_info don't match :)
		    fastcgi_param PATH_INFO $fastcgi_script_name;
		    fastcgi_param SCRIPT_NAME "";
		 }
	}
_______________________________________________
devel mailing list
devel@...
http://lists.mediagoblin.org/listinfo/devel
Dylan Jeffers | 31 Jul 03:27 2015

[GMG-Devel] Goblinoid 0.1 Release!

Hi all,

I am happy to announce Goblinoid's initial public release. Major
features include:
   - View recent activity
   - View and add comments
   - Upload media
   - View followers, followees and their recent activity

For this release I am most interested in hearing how the installation
process goes for goblinoid on the computer and Android devices. Detailed
installation instructions are located in the README (see attached)

Since the app was designed to work on a range of different webfingers, I
am also interested to hear about your experiences with mediagoblin's and
other pump.io webfingers.

Soon I will include a release notes file in the master branch
highlighting current features, known bugs, and plans for upcoming releases.

I will maintain a weekly release schedule, so be sure to let me know of
any issues, and I will try to get them fixed for the subsequent release.

Please let me know if there is anything else you guys would like to know!

Best,
Dylan
Attachment (README.md): text/x-markdown, 4415 bytes
_______________________________________________
devel mailing list
devel@...
http://lists.mediagoblin.org/listinfo/devel

[GMG-Devel] MediaGoblin monthly meeting (Sat August 01, 2015 09:00)

MediaGoblin monthly meeting

Where: IRC #mediagoblin on irc.freenode.net
When: Sat Aug  1 09:00:00 2015 Pacific Time

Agenda and wiki notes are at http://wiki.mediagoblin.org/Meeting

Reply to this email to add new agenda items, discuss the agenda, or discuss meeting time.

Summary: MediaGoblin has a monthly meeting to coordinate the month's activities.  This meeting occurs on
the first Saturday of every month at 9:00am Pacitic Time.

Helpful links:
* Convert to your timezone: http://www.timeanddate.com/worldclock/fixedtime.html?iso=20150801T09&p1=224&ah=1

[GMG-Devel] GMG Bug Triage Day (Thu July 30, 2015 00:00)

GNU MediaGoblin Bug Triage Day

Where: IRC #mediagoblin on irc.freenode.net
When: All day long

Help us triage bugs! Find bugs that are old, forgotten, unverified and in other states of
not-quite-doneness. Help them on their way by giving them a friendly nudge!

Issue tracker: http://issues.mediagoblin.org/

Wiki page: http://wiki.mediagoblin.org/BugTriageDay

Join us as we scour the GNU MediaGoblin issue tracker for bugs that need some help.

Bug Triage Day is a bi-weekly meeting every other Thursday.
Duncan | 24 Jul 03:42 2015

[GMG-Devel] [PATCH] Prevent browsers sending referrer headers

Hi MediaGoblin community,

I've got a one-line patch for MediaGoblin but I see that you're having
issues with spam on Trac, maybe discussing here is easier?

This change prevents browsers sending Referrer headers from MediaGoblin.
It fixes the scenario where a user clicks an external link in a
description field or comment, resulting in their browser revealing their
MediaGoblin instance and media URL to that site.

I think this is a safer default because users might not expect to reveal
their private MediaGoblin instance simply by following a link. (For
public instances users might not be concerned either way.)

The meta tag used here is part of the upcoming Referrer Policy spec[1]
and already works in Firefox and Chrome.

Thanks for working on MediaGoblin!

Duncan

[1]: https://w3c.github.io/webappsec/specs/referrer-policy/

---
 mediagoblin/templates/mediagoblin/base.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mediagoblin/templates/mediagoblin/base.html b/mediagoblin/templates/mediagoblin/base.html
index ddc38b3..a3f9066 100644
--- a/mediagoblin/templates/mediagoblin/base.html
+++ b/mediagoblin/templates/mediagoblin/base.html
 <at>  <at>  -27,6 +27,7  <at>  <at> 
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="referrer" content="no-referrer">
     <meta http-equiv="X-UA-Compatible" content="IE=Edge">
     <title>{% block title %}{{ app_config['html_title'] }}{% endblock %}</title>
     <link rel="stylesheet" type="text/css"
--

-- 
2.4.6

Gmane