ocular - scratch forum info

ninjaMAR

Jeffalo wrote:
Ihatr wrote:
How’d you get the name “ocular” Jeffalo?

xd

Jeffalo

ocular will have to be rewritten one day, the search has a ton of issues and im not sure why.

Last edited by Jeffalo (Dec. 20, 2020 16:28:48)

ninjaMAR

Jeffalo wrote:
ocular will have to be rewritten one day, the search has a ton of issues and im not sure why.

when is that day

Burgher1679

ninjaMAR wrote:
Jeffalo wrote:
ocular will have to be rewritten one day, the search has a ton of issues and im not sure why.
when is that day

31/12/2020 (dd/mm/yyyy) at 23:59:59

Ihatr

Jeffalo wrote:
Ihatr wrote:
How’d you get the name “ocular” Jeffalo?

UGH LIGHT MODE

DatOneLefty

Jeffalo wrote:
ocular will have to be rewritten one day, the search has a ton of issues and im not sure why.

What are the odds is an issue on my end?

Jeffalo

DatOneLefty wrote:
Jeffalo wrote:
ocular will have to be rewritten one day, the search has a ton of issues and im not sure why.
What are the odds is an issue on my end?

i doubt it, i made a sanitizer to clean up html, in code tags but it looks like it makes it worse and now there's xss left and right

Last edited by Jeffalo (Jan. 3, 2021 21:49:23)

Jeffalo

test for ocular:

<b>this is bold?</b> <img onerror='alert(1)'>

Jeffalo

<b>this is <i>html</i></b>

<b>this is <i>html</i> inside of code tag with code highlighting</b>

Maximouse

Jeffalo wrote:
<img onerror='alert(1)'>

<img src onerror='alert(1)'>

Edit: yes, it works, you have to fix it.

Last edited by Maximouse (Dec. 31, 2020 18:16:38)

Jeffalo

Maximouse wrote:
Jeffalo wrote:
<img onerror='alert(1)'>
<img src onerror='alert(1)'>

Edit: yes, it works, you have to fix it.

not my bug, it's on lefty's side.

unless i write my own scratch-compliant bbcode parser, i have no way of knowing what is html from bbcode formatting and what is html from posts.

so nothing i can do about it for now…

Jeffalo

ocular search is currently down due to an emergency rewrite, fortunately everythings going well and it should be up sometime soon.
extra points for those who can tell whats new here

Maximouse

Jeffalo wrote:
extra points for those who can tell whats new here

Post counts, and the username & PFP area is wider. Could you also make dates display in a nicer format?

Edit: I'm assuming the emergency rewrite is related to XSS, so will code tags be fixed?

Last edited by Maximouse (Jan. 5, 2021 10:05:46)

Jeffalo

Maximouse wrote:
Post counts, and the username & PFP area is wider. Could you also make dates display in a nicer format?

Edit: I'm assuming the emergency rewrite is related to XSS, so will code tags be fixed?

i dont think the sidebar thing is supposed to be wider, i must have messed something up there lol

ok i'll make dates display in the user's timezone

yes the rewrite is kinda about the xss, lefty temporarily disabled my api access so that we can can work on a solution, i'm using this time to rewrite ocular from the ground up in nuxt.

the solution is like this:
- every post will be reindexed properly
- lefty's api will say if that post has been reindexed without the html problems
- ocular will display all posts that have been reindexed like normal
- posts which haven't be reindexed will be displayed as raw bbcode with a button or something to render the html

Maximouse

Jeffalo wrote:
i dont think the sidebar thing is supposed to be wider, i must have messed something up there lol

It's actually better now – previously different posts had different sidebar width depending on the length of the username.

Jeffalo

ocular ception

mybearworld

(removed)

Last edited by mybearworld (June 7, 2023 12:37:08)

Jeffalo

timezone test: it is currently 11:20 when i pst this

Jeffalo

alright sorry for the messy launch, but ocular 2.0 codename binocular is properly released now.

it's server side rendered which means it should theoretically be instant to use once the page is loaded, it can show post counts and all that which is neat, and it also shows local timezones or my timezone if it can't.

it's also all rewritten in a way which hopefully should make updates in the future a lot better.

i plan on separating specific posts, topics and users from search, then their URLs can be something like /post/1234 or /user/jeffalo

ninjaMAR

Jeffalo wrote:
alright sorry for the messy launch, but ocular 2.0 codename binocular is properly released now.

it's server side rendered which means it should theoretically be instant to use once the page is loaded, it can show post counts and all that which is neat, and it also shows local timezones or my timezone if it can't.

it's also all rewritten in a way which hopefully should make updates in the future a lot better.

i plan on separating specific posts, topics and users from search, then their URLs can be something like /post/1234 or /user/jeffalo

anything else?

Discuss Scratch