PSA regarding quotes in isso fluffy rambles

Comments

After my recent isso updates, I found that double-quotes had disappeared from most peoples' comments, and it was really weird and I couldn’t figure out why.

Anyway, long story short, it turns out that something changed to cause the EXT_QUOTE support to start converting "s into <q>s, and isso’s HTML sanitizer (which runs after Markdown conversion) isn’t configured to allow that as an HTML element. (Or maybe this was happening all along and I just didn’t notice until now! Nothing in Misaka has changed in that time so I probably just never noticed.)

The fix is to either remove quote from options or add q to allowed-elements in the [markup] section of the isso config file. For example, here’s that section of mine:

beesbuzz.biz.cfg
[markup]
options=strikethrough, autolink, fenced-code, no-intra-emphasis, superscript, highlight, quote, tables
allowed-elements=mark, sup, sub, q

On a related note, don’t enable EXT_QUOTE on Publ if you want quotes to be able to appear in auto-generated entry summaries and the like. (I suppose I should change Publ to always override the Markdown extension configuration where it makes sense…)

Isso comment privacy update fluffy rambles

Comments

So the reason for my recent mini-rantle was that I found a hidden API in isso that would have made it pretty easy for folks to trivially scrape every comment on my website, including ones on private entries.

Fortunately the fix was really simple and it’s what I have deployed on my site right now.

Read more…

So, comments were broken fluffy rambles

Comments

So hey, I thought it was weird that nobody had been posting comments on my blog in a while. Turns out comments were just, like, broken, and nobody told me, for some reason.

The problem turned out to be that Isso currently doesn’t work on Python 3.8 (or at least, the current released version, which is ridiculously outdated, doesn’t), and it was easy to roll it back to Python 3.7, thanks to poetry’s pyenv integration. So, score another one for poetry.

But why don’t people actually tell me when they’re having problems with my site? Do people just assume that if something’s broken it’s broken on purpose? Because I mean… no?

Anyway, comments are fixed now.

Read more…