Posts that Justin Ormont is monitoring

Feb 23, 2007

Britt Selvit... 22 posts

Lior,

Absolutely! Unfortunately (and fortunately!), when we revamped the site security was the primary concern. We are now working on all the little bits.

We're really value your thoughts about this on the wiki page for this issue here: http://userscripts.devjavu.com/projects/userscr...

Feb 23, 2007

Lior Zur 39 posts

Topic: HTML Align

Thanks for the replies Britt and Jesse, this clarifies much.
To make it clear -- my concern wasn't security holes, but simply usability. This site hosts a great number of scripts. As a user, I have hard time deciding which to install, and which is better or more up to date among "competing" scripts. As an author, I struggle to show potential users what my scripts do in fact offer and how up to date they are. The us.o1 had a flexible "extended description" field, which we used as an all-in-one solution: it contained a change log, screenshots, install instructions, use instructions, caveats, search keywords, occasional ruminations, etc. These info bits are common to most scripts, but there was no standard for displaying them, so each author hacked a home-made solution of his own, resulting in site-wide inconsistency.
I argue we should standardize as much of these "common info bits" as possible. Two positive results will ensue: 1. eliminating home-made "solutions", thus increasing consistency; 2. encouraging authors to provide more info about their scripts (like changelog, screenshots) -- thus ensuring the end user is better informed.

Feb 23, 2007

Jesse Andrews 231 posts

Topic: HTML Align

Just to clarify Britt's "we're going to be moving towards a medium ground ..."

This site is open source, and while Britt and I have talked about things, it is a community site, so everyone can talk about what they think us.o's styling policy should be. I agree myspace is overkill though!

Feb 23, 2007

Britt Selvit... 22 posts

Topic: HTML Align

Hey Lior,

Re: Styling. We're going to be moving towards a medium ground between the extended descriptions we had in us.o1 and the strictness of us.o2. So what does this mean? You should be able to preform basic manipulation of your custom description ... centering, bolding, including images and other media (-> jesse's hint about possible media hosting).

One of our primary concerns when moving to v2 was sealing XSS holes as much as possible, hence the very strict filters in place right now.

Re: Script versioning/changelog ... yes it's in the works :)

Feb 22, 2007

Lior Zur 39 posts

Topic: HTML Align

Jesse: First, thanks again for the time and effort you put into this project -- the swift and courteous replies, the immediate fixes, and all...!
Now, I think it's a bad idea to have authors design their own styles. Consistency across the site is important. Usability will degrade if one script is blue text on red background, and the other is yellow on brown with funny little animations. You'd have a miniature MySpace on your hands in no time. In fact, IMHO it's best to enforce stricter guidelines for script descriptions. The suggested Gallery feature is a step in this right direction: it replaces non-standard and nonuniform hacks of individual authors. Another good step would be having a standard Change Log which also keeps track of script versions (is this in the works already)?

Feb 21, 2007

Jesse Andrews 231 posts

Topic: HTML Align

Justin - the site has yet to really be styled - we are using a slight modification of beast (the forum software we are based on) - so any such hacks will probably not work for a long time.

That said allowing authors to have control over how their script is presented is important.

Allowing an external stylesheet isn't safe since you can have javascript in the css... perhaps just as BLOCKQUOTE, PRE, CODE all have styles associated with them, perhaps we can have other predefined styles for scripters to use in their descriptions? Or perhaps we can have galleries of "script description styles" that are contributed and scripters can choose between?

Feb 21, 2007

Arvid 116 posts

Topic: HTML Align

Uh… I thought he meant creating a center aligned image with his script ;)

Feb 21, 2007

Jesse Andrews 231 posts

Topic: HTML Align

Justin - ugh - sorry we are stripping that attribute out - we should fix that. We are thinking about creating a gallery ability (you can upload photos and descriptions).

Feb 20, 2007

Arvid 116 posts

Topic: HTML Align

It probably depends on the context of the image. But maybe this helps.

Feb 23, 2007 Britt Selvit... 22 posts	Topic: HTML Align Lior, Absolutely! Unfortunately (and fortunately!), when we revamped the site security was the primary concern. We are now working on all the little bits. We're really value your thoughts about this on the wiki page for this issue here: http://userscripts.devjavu.com/projects/userscr...

Feb 23, 2007 Lior Zur 39 posts	Topic: HTML Align Thanks for the replies Britt and Jesse, this clarifies much. To make it clear -- my concern wasn't security holes, but simply usability. This site hosts a great number of scripts. As a user, I have hard time deciding which to install, and which is better or more up to date among "competing" scripts. As an author, I struggle to show potential users what my scripts do in fact offer and how up to date they are. The us.o1 had a flexible "extended description" field, which we used as an all-in-one solution: it contained a change log, screenshots, install instructions, use instructions, caveats, search keywords, occasional ruminations, etc. These info bits are common to most scripts, but there was no standard for displaying them, so each author hacked a home-made solution of his own, resulting in site-wide inconsistency. I argue we should standardize as much of these "common info bits" as possible. Two positive results will ensue: 1. eliminating home-made "solutions", thus increasing consistency; 2. encouraging authors to provide more info about their scripts (like changelog, screenshots) -- thus ensuring the end user is better informed.

Feb 23, 2007 Jesse Andrews 231 posts	Topic: HTML Align Just to clarify Britt's "we're going to be moving towards a medium ground ..." This site is open source, and while Britt and I have talked about things, it is a community site, so everyone can talk about what they think us.o's styling policy should be. I agree myspace is overkill though!

Feb 23, 2007 Britt Selvit... 22 posts	Topic: HTML Align Hey Lior, Re: Styling. We're going to be moving towards a medium ground between the extended descriptions we had in us.o1 and the strictness of us.o2. So what does this mean? You should be able to preform basic manipulation of your custom description ... centering, bolding, including images and other media (-> jesse's hint about possible media hosting). One of our primary concerns when moving to v2 was sealing XSS holes as much as possible, hence the very strict filters in place right now. Re: Script versioning/changelog ... yes it's in the works :)

Feb 22, 2007 Lior Zur 39 posts	Topic: HTML Align Jesse: First, thanks again for the time and effort you put into this project -- the swift and courteous replies, the immediate fixes, and all...! Now, I think it's a bad idea to have authors design their own styles. Consistency across the site is important. Usability will degrade if one script is blue text on red background, and the other is yellow on brown with funny little animations. You'd have a miniature MySpace on your hands in no time. In fact, IMHO it's best to enforce stricter guidelines for script descriptions. The suggested Gallery feature is a step in this right direction: it replaces non-standard and nonuniform hacks of individual authors. Another good step would be having a standard Change Log which also keeps track of script versions (is this in the works already)?

Feb 21, 2007 Jesse Andrews 231 posts	Topic: HTML Align Justin - the site has yet to really be styled - we are using a slight modification of beast (the forum software we are based on) - so any such hacks will probably not work for a long time. That said allowing authors to have control over how their script is presented is important. Allowing an external stylesheet isn't safe since you can have javascript in the css... perhaps just as BLOCKQUOTE, PRE, CODE all have styles associated with them, perhaps we can have other predefined styles for scripters to use in their descriptions? Or perhaps we can have galleries of "script description styles" that are contributed and scripters can choose between?

Feb 21, 2007 Arvid 116 posts	Topic: HTML Align Uh… I thought he meant creating a center aligned image with his script ;)

Feb 21, 2007 Jesse Andrews 231 posts	Topic: HTML Align Justin - ugh - sorry we are stripping that attribute out - we should fix that. We are thinking about creating a gallery ability (you can upload photos and descriptions).

Feb 20, 2007 Arvid 116 posts	Topic: HTML Align It probably depends on the context of the image. But maybe this helps.

Posts that Justin Ormont is monitoring

Justin Ormont's monitored topics