> I think this is problematic from a security perspective. In no way I want a > link to import executable js code to my wiki.
Nothing would be imported into your own wiki, the link is just pre-populating a webpage which is safely sandboxed by the browser (and won’t inherit any other cookies etc). But there would be an “export” button to download a JSON of the payload tiddlers. Otherwise, the issues with bitly can perhaps be dealt with in a couple of ways: * Provide the raw link for people who prefer it * Encourage users to use a little bitly trick where adding a “+” to the end of the URL will show the link target without navigating to it. For example https://bitly.com/2u97Hgr+ <https://bitly.com/2u97Hgr+> Best wishes Jeremy > On 1 Feb 2020, at 12:01, Mohammad <[email protected]> wrote: > > Hi Jeremy, > I absolutely support this idea! > Clicking on the link in Forum, Open tiddlywiki.com or > tiddlywiki.com/prerelease and then > have a snippet, or plugin working! > > This is also is safe and one can examine the code before installing in his > own wiki! > Regarding open source, and the concern Mario has, while we need to have the > put the required safety into our work > but we should not cautious that much, if so, then the first source of risk > is Microsoft Windows itself, this forum, gmail and ... > > So, keep it simple! > > > --Mohammad > > On Saturday, February 1, 2020 at 1:51:00 PM UTC+3:30, Jeremy Ruston wrote: > There’s an interesting discussion about simplifying sharing demos/snippets on > Google Groups over on a thread of Tony’s: > > https://groups.google.com/d/msgid/tiddlywiki/42db53e3-e372-4005-8ea1-32f409d6963d%40googlegroups.com > > <https://groups.google.com/d/msgid/tiddlywiki/[email protected]> > > Just brainstorming, but I should it should be possible to build something > simple that might do the job. > > Firstly, we’d need to create a version of empty.html that loads all its > tiddlers as a block of JSON from the location hash part of the URL. That > would allow people to post links that populated the empty wiki with any > number of tiddlers. Historically, some browsers limited URLs to 2048 > characters, but it seems that most browsers will support anything up to 64KB. > > For example: > > https://tiddlywiki <https://tiddlywiki/>.com/share.html#[{"text": "This is > the text of a tiddler","title": "My Title","tags": "Definitions”}] > > So that one could include plugins and other settings that would require a > restart if imported normally, we’d have to use a raw markup snippet to read > the tiddlers from the location hash before TW starts up. > > Secondly, we’d need a means to create those links. The same edition when > started without any tiddlers could prompt the user to import tiddlers, and > present a “share” button that creates the URL. > > To make the resulting long URLs convenient, it would be worth investigating > the APIs of services like bitly.com <http://bitly.com/> so that we can > automatically create a shortened version of the URL. > > Best wishes > > Jeremy. > > -- > You received this message because you are subscribed to the Google Groups > "TiddlyWiki" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/tiddlywiki/4623f146-7db4-4b7b-a15d-c7fc5a39975c%40googlegroups.com > > <https://groups.google.com/d/msgid/tiddlywiki/4623f146-7db4-4b7b-a15d-c7fc5a39975c%40googlegroups.com?utm_medium=email&utm_source=footer>. -- You received this message because you are subscribed to the Google Groups "TiddlyWiki" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/tiddlywiki/A46270CB-0662-48DE-88BF-F8921803A31C%40gmail.com.
