New Forum Online - Post Feature Requests Here

Discussion of anything and everything relating to chess playing software and machines.

Moderators: hgm, Rebel, chrisw

User avatar
hgm
Posts: 27866
Joined: Fri Mar 10, 2006 10:06 am
Location: Amsterdam
Full name: H G Muller

Re: New Forum Online - Post Feature Requests Here

Post by hgm »

smatovic wrote: Tue Mar 05, 2024 8:29 pm
hgm wrote: Tue Mar 05, 2024 7:43 pm [...]
I myself prefer to serve content only from local server, this is old fashioned, meanwhile the web-sites all use so called micro-services....everything external you include can be use for exploits in theory, cross-site scripting:

https://en.wikipedia.org/wiki/Cross-site_scripting

maybe take a closer look into pgn4web, the demo site shows live game viewers...

http://pgn4web.casaschi.net/home.html
http://pgn4web.casaschi.net/demo.html

might spare some time and headache.

--
Srdja
I know how live viewing with pgn4web works: the one running the tourney constantly uploads the growing PGN file to the website where the HTML page containing the pgn4web applet resides. This assumes you have webspace where you can upload arbitrary files. Which is certainly not something we would want to allow here.

I don't know if pgn4web can do anything that my own viewer cannot already do. And I know lots of things it cannot do (like anything that is not orthodox chess).

Cross-site scripting is a vulnerability, but I don't think there is any sequence of chess moves that could fool anyone into thinking it is something else. So if the upload script makes sure the appended values are chess moves (say in long-algebraic notation, which is simple to check), that seems sufficient defense. Together with a length limit, to prevent filling the disk.
smatovic
Posts: 2719
Joined: Wed Mar 10, 2010 10:18 pm
Location: Hamburg, Germany
Full name: Srdja Matovic

Re: New Forum Online - Post Feature Requests Here

Post by smatovic »

hgm wrote: Tue Mar 05, 2024 9:11 pm [...]
Cross-site scripting is a vulnerability, but I don't think there is any sequence of chess moves that could fool anyone into thinking it is something else. So if the upload script makes sure the appended values are chess moves (say in long-algebraic notation, which is simple to check), that seems sufficient defense. Together with a length limit, to prevent filling the disk.
:thumbsup:

--
Srdja
smatovic
Posts: 2719
Joined: Wed Mar 10, 2010 10:18 pm
Location: Hamburg, Germany
Full name: Srdja Matovic

Re: New Forum Online - Post Feature Requests Here

Post by smatovic »

xenos1984 wrote: Tue Mar 05, 2024 9:09 pm I think it would be nice to have avatars - currently the user control panel says they are disabled.
I did send the link of this thread to the Founders Group, so they can consider the member requests made.
xenos1984 wrote: Tue Mar 05, 2024 9:09 pm In any case, thanks for the nice works on the forum - especially the possibilities to post (fairy) chess positions and game logs are pretty nice!
--
Srdja
smatovic
Posts: 2719
Joined: Wed Mar 10, 2010 10:18 pm
Location: Hamburg, Germany
Full name: Srdja Matovic

Re: New Forum Online - Post Feature Requests Here

Post by smatovic »

Update available emoticons list with ": thumbsup: " :thumbsup: etc.

--
Srdja
User avatar
hgm
Posts: 27866
Joined: Fri Mar 10, 2006 10:06 am
Location: Amsterdam
Full name: H G Muller

Re: New Forum Online - Post Feature Requests Here

Post by hgm »

xenos1984 wrote: Tue Mar 05, 2024 9:09 pm I think it would be nice to have avatars - currently the user control panel says they are disabled.
I now switched on the avatars, and indeed my old avatar appeared. If anyone that used to have an avatar before March 1 doesn't see the same avatar now, please let me know.
User avatar
xenos1984
Posts: 6
Joined: Mon Feb 19, 2024 7:50 am
Full name: Manuel Hohmann

Re: New Forum Online - Post Feature Requests Here

Post by xenos1984 »

I tried to add this avatar, but I get an error message "The URL you specified is invalid.":

Image
User avatar
hgm
Posts: 27866
Joined: Fri Mar 10, 2006 10:06 am
Location: Amsterdam
Full name: H G Muller

Re: New Forum Online - Post Feature Requests Here

Post by hgm »

It could be because the image is on a http site, while the forum now is https.

Can you upload the avatar to the forum? I had switched this option on, but it appeared that the upload directory was not writable. I now corrected this.
User avatar
xenos1984
Posts: 6
Joined: Mon Feb 19, 2024 7:50 am
Full name: Manuel Hohmann

Re: New Forum Online - Post Feature Requests Here

Post by xenos1984 »

hgm wrote: Thu Mar 07, 2024 8:15 am Can you upload the avatar to the forum? I had switched this option on, but it appeared that the upload directory was not writable. I now corrected this.
Yes, that worked. Thanks!
smatovic
Posts: 2719
Joined: Wed Mar 10, 2010 10:18 pm
Location: Hamburg, Germany
Full name: Srdja Matovic

Re: New Forum Online - Post Feature Requests Here

Post by smatovic »

chesskobra wrote: Tue Mar 05, 2024 2:14 pm 2. Too much white space. Maybe others like it.
I modded the colors for forum view, let me know, if better, or propose own color settings:

Code: Select all

/* "too much whitespace mod start */
li.row {
        border-color: #FFFFFF;
        /* border-color: #e9f1f8; */
        /* background: #FFFFFF; */
        background-color: #E1EBF2;
}

ul.topiclist li.row:first-child {
    /* border-top-color: #e9f1f8a */;
    border-top-color: #FFFFFF;
}

li.row:hover {
        /* background-color: #f8fcff; */
        background-color: #ECF3F7;
}
.row.bg1 {
        background-color: #E1EBF2;
}
.row.bg2 {
        background-color: #E1EBF2;
}
.topiclist.forums {
        background-color: #FFFFFF;
}
.topiclist.topics {
        background-color: #FFFFFF;
}

/* "too much whitespace mod end */
--
Srdja

PS: ^ not a designer.

PPS: might need shift + reload to reload .css files in browser.
chesskobra
Posts: 175
Joined: Thu Jul 21, 2022 12:30 am
Full name: Chesskobra

Re: New Forum Online - Post Feature Requests Here

Post by chesskobra »

smatovic wrote: Sun Mar 10, 2024 12:08 am
chesskobra wrote: Tue Mar 05, 2024 2:14 pm 2. Too much white space. Maybe others like it.
I modded the colors for forum view, let me know, if better, or propose own color settings:
Sorry, I think my comment caused some confusion. I didn't mean the white colour, I just meant too much blank space. But now that I look at it again, it looks fine; I don't think there is too much blank space.