Page MenuHomePhabricator
Create Task
Maniphest T11126

Allow embedding XKCD panes in Remarkup
Closed, WontfixPublic
Actions

Description

Just dumping the image looses the alt-text, and that's at least 35% of the thing.

Related Objects

Event Timeline

avivey created this task.Jun 10 2016, 12:05 AM
Herald added a subscriber: eadler. · View Herald TranscriptJun 10 2016, 12:05 AM
epriestley added a subscriber: epriestley.Jun 10 2016, 12:35 AM

Looks like there's a JSON API: https://xkcd.com/json.html

I don't want to enable this by default because of referrer-leakage issues before T4190, but it could come upstream after T4190 or be an extension now/properly after T5055.

eadler added a comment.Jun 10 2016, 3:51 AM

Silly question but can't we use CSP Level 2's referrer directive (https://www.w3.org/TR/CSP11/#directive-referrer) to avoid leaking information without the need to build full image proxying?
If that doesn't work can we use <iframe seamless referrerpolicy="no-referrer"> ?

• alfonso added a subscriber: • alfonso.Jun 10 2016, 11:00 PM
eadler added a comment.Jun 13 2016, 1:42 AM
In T11126#179873, @eadler wrote:

Silly question but can't we use CSP Level 2's referrer directive (https://www.w3.org/TR/CSP11/#directive-referrer) to avoid leaking information without the need to build full image proxying?
If that doesn't work can we use <iframe seamless referrerpolicy="no-referrer"> ?

this might also allow the removal of the config setting to enable youtube in remarkup.

joshuaspence added a subscriber: joshuaspence.Jun 26 2016, 10:10 PM
eadler added a project: Restricted Project.Aug 7 2016, 7:59 PM
eadler mentioned this in T4190: Rebuild remarkup image proxying.Aug 25 2016, 4:57 PM
aklapper added a subscriber: aklapper.Nov 17 2016, 5:23 PM
chad moved this task from Backlog to Tomfoolery on the Remarkup board.Mar 27 2017, 4:01 PM
anda added a subscriber: anda.Jul 4 2017, 1:28 PM
epriestley closed this task as Wontfix.Apr 4 2018, 2:09 PM
epriestley claimed this task.

This is well-suited to a third-party extension, particularly after T5055.

Phabricator · Built by Phacility