Damn. Working fine as far as I could test: marking notifications "done", markdown preview, etc. Superb.
PM 28.14.2 Github
Moderator: trava90
Forum rules
Please always mention the name/domain of the website in question in your topic title.
Please one website per topic thread (to help keep things organized). While behavior on different sites might at first glance seem similar, they are not necessarily caused by the same.
Please try to include any relevant output from the Toolkit Error Console or the Developer Tools Web Console using the following procedure:
Please always mention the name/domain of the website in question in your topic title.
Please one website per topic thread (to help keep things organized). While behavior on different sites might at first glance seem similar, they are not necessarily caused by the same.
Please try to include any relevant output from the Toolkit Error Console or the Developer Tools Web Console using the following procedure:
- Clear any current output
- Navigate or refresh the page in question
- Copy and paste Errors or seemingly relevant Warnings into a single [ code ] block.
Re: PM 28.14.2 Github
Re: PM 28.14.2 Github
For those curious as to what it does: the extension injects an existing WebComponents polyfill library in html pages on github.com. This way Github's reliance-without-fallsbacks on Google WebComponents is satisfied (in essence doing what GitHub itself should be doing to be browser-agnostic).
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: PM 28.14.2 Github
In fact, it's fortunate that this approach met the basic requirements of the GitHub framework, but not all features work as expected, for example, there are no pop-ups on usernames, issues, commits, etc., and it's also impossible to create a new repository. However, the main functions are currently working, and hopefully the GitHub devs don't break it again too quickly.
Re: PM 28.14.2 Github
How does this mesh with my ajax bypass and why is it not something that can be seen? What is this encoded as and what is the original source and why is it disabling and intercepting csp. For all I know it is sending you everything I do on github including credentials.
Explain.
Explain.
Re: PM 28.14.2 Github
I can answer part of this: GitHub uses a rather strict CSP policy, so to enable an injected script, it needs to be added as an allowed source in the policy or the browser will not load/execute it.
It's encoded because it'll have characters in there that would break the JS otherwise (like quotes). Seems to be standard base-64 encoding.
Although I do wonder why you're not supplying the code in plaintext as a resource:// URI and inject a script tag with that. It would make it a lot more transparent.
It's encoded because it'll have characters in there that would break the JS otherwise (like quotes). Seems to be standard base-64 encoding.
Although I do wonder why you're not supplying the code in plaintext as a resource:// URI and inject a script tag with that. It would make it a lot more transparent.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Re: PM 28.14.2 Github
Why couldn't this just be in not encoded form. ie resource uri link that would have made the perfect basis for something I asked for some months ago: an example of simple script injection as an extension without the massive amount of dependance on greasemonkey.
But, as always, it was just me asking so no one bothered to help and JustOff's almost but not quite useful solution negates that goal. Also, bootstrap style rather than toolkit style because of course it would be.
But, as always, it was just me asking so no one bothered to help and JustOff's almost but not quite useful solution negates that goal. Also, bootstrap style rather than toolkit style because of course it would be.
Re: PM 28.14.2 Github
Quite right.Moonchild wrote: ↑2020-10-15, 20:47I can answer part of this: GitHub uses a rather strict CSP policy, so to enable an injected script, it needs to be added as an allowed source in the policy or the browser will not load/execute it.
It's encoded because it'll have characters in there that would break the JS otherwise (like quotes). Seems to be standard base-64 encoding.
I'm afraid that this would require relaxing the CSP even more, whereas now I only allowed a script with a specific sha256 hash.Although I do wonder why you're not supplying the code in plaintext as a resource:// URI and inject a script tag with that. It would make it a lot more transparent.
Re: PM 28.14.2 Github
As the project I code for has it's repository on GitHub I do have an account and I left a message on https://support.github.com which got me this canned response:
I am not expecting a positive response from GH but I am pleased to say that whatever JustOff is doing in their add-on is at least restoring the functionality I need. Whether GH fixes their page generation to put back the call for that third-party resource remains to be seen. So, provided JustOff is not doing anything otherwise untoward in the PaleMoon (and presumably other affected) browsers they get a +1 from me...
I sent an unfavourable reply reminding them of Postel's Law and pointing out that it is the omission of https://github.com/webcomponents/polyfills that breaks things for non-bleeding edge browsers used by those that are not sheeple...## Please do not write below this line ##
Your request has been updated.
You can add a comment by replying to this email.
Adrienn Richmond (GitHub Support)
Oct 15, 2020, 4:38 PM UTC
Hi Stephen,
Thanks for contacting GitHub Support!
I'm afraid that we only support the current versions of Chrome, Firefox, Safari, and Microsoft Edge. We do not support any other browsers and unfortunately it is irrelevant that your browser is a fork of Firefox.
Here is a list of our supported browsers:
https://help.github.com/articles/supported-browsers
Could you please try visiting the page again in a supported browser and let us know if you are still experiencing any issues?
If you're still having trouble even then, could you please confirm the exact browser version and operating system you're using?
Cheers,
Adrienn
GitHub Support
Stephen Lyons
Oct 15, 2020, 3:16 AM UTC
Dear Sir/Madam;
I regret to report that some change that you have made to your https://github.com website has rendered GitHub unusable for me with my primary browser PaleMoon https://www.palemoon.org/ (version 28.14.2 released 2020/10/02). This mature fork of FireFox (with Mozilla's telemetry removed and with a forked from Gecko rendering engine "Goanna") has become unable to produce previews of messages, no auto-completion of emojis after typing a ':' and most significantly the merge button is unresponsive in that clicking it does not do anything - which is a PITA as I had a couple of PRs I wanted to merge.
This change has happened in the last 24 hours so is not concerned with any update in the browser. To confirm this I tried two additional steps, first by creating a new profile with no add-ons in the latest version and then by uninstalling the browser and reinstalling the previous 28.13.0 version. Neither actions restored normal operations.
Just in case it was a problem with my AntiVirus software in the 64-bit Windows 10 Home 2004 (OS build 19041.508) I also booted up the same (latest) browser in a second 64-bit PC using Linux (Devuan 3.0) and that was equally unusable.
Tracking this issue at: viewtopic.php?f=70&p=201727 someone else has reported that some JavaScript is failing to load - I do not know if that will help anyone to debug and fix this problem as it is a major inconvenience!
Regards
Stephen Lyons
This email is a service from GitHub Support.
[93WV8E-QX2D]
I am not expecting a positive response from GH but I am pleased to say that whatever JustOff is doing in their add-on is at least restoring the functionality I need. Whether GH fixes their page generation to put back the call for that third-party resource remains to be seen. So, provided JustOff is not doing anything otherwise untoward in the PaleMoon (and presumably other affected) browsers they get a +1 from me...
Re: PM 28.14.2 Github
Chrome, Wants to be Chrome, Was Chrome, and Chrome are their supported browsers.
Re: PM 28.14.2 Github
i wasn't even able to get a manufactured response from their h-1b-powered support team, so more power to you i guess - although i literally do not host anything on github, so that might be a problem. i'm not even surprised this is another webcomponents issue, i don't even want to know what's going to happen if big tech universally decides to adopt Google™ Web Bundles™ (and they probably will)SlySven wrote: ↑2020-10-15, 21:44As the project I code for has it's repository on GitHub I do have an account and I left a message on https://support.github.com which got me this canned response:
-snip-
I sent an unfavourable reply reminding them of Postel's Law and pointing out that it is the omission of https://github.com/webcomponents/polyfills that breaks things for non-bleeding edge browsers used by those that are not sheeple...
I am not expecting a positive response from GH but I am pleased to say that whatever JustOff is doing in their add-on is at least restoring the functionality I need. Whether GH fixes their page generation to put back the call for that third-party resource remains to be seen. So, provided JustOff is not doing anything otherwise untoward in the PaleMoon (and presumably other affected) browsers they get a +1 from me...
i didn't see this until i woke up around 10 minutes ago but thank you!
Re: PM 28.14.2 Github
The fact that they doubled down on being totally uninterested in fixing bugs that their laziness caused is simply amazing. I'm surprised that their message didn't end with "Switch to Chrome, or buzz off. You are lucky that we are even bothering to respond to you, vermin." After all, the façade of professionalism in their e-mail message to you was totally broken by their "your browser originating as a fork of Firefox means nix to us" comment.GitHub wrote: we only support [...] Chrome, Firefox, Safari, and Microsoft Edge. We do not support any other browsers and unfortunately it is irrelevant that your browser is a fork of Firefox.
Cheers,
Adrienn
GitHub Support
I worry that coders are becoming comfortable (like a couch potato is on their couch, irritated when they need to or are asked to get up and get something) with not having to be browser-neutral. After all, if (to all intents and purposes) everything is Chrome, then why would someone who has spent the last several years just coding for Chrome bother coding for anything else whatsoever?
Last edited by Tharthan on 2020-10-15, 23:21, edited 4 times in total.
Re: PM 28.14.2 Github
Seems to mesh well enough with my ajax bypass userscript. I was able to make a new repository with it. Though the popup fake tooltips for usernames and issues are still not present.
Re: PM 28.14.2 Github
I don't think it's laziness, they what to eliminate every browser that does not comfort to their view,and of course imagine a browser of a big tech company without telemetry....how on earth are they going to spy on youTharthan wrote: ↑2020-10-15, 23:08The fact that they doubled down on being totally uninterested in fixing bugs that their laziness caused is simply amazing. I'm surprised that their message didn't end with "Switch to Chrome, or buzz off. You are lucky that we are even bothering to respond to you, vermin." After all, the façade of professionalism in their e-mail message to you was totally broken by their "your browser originating as a fork of Firefox means nix to us" comment.GitHub wrote: we only support [...] Chrome, Firefox, Safari, and Microsoft Edge. We do not support any other browsers and unfortunately it is irrelevant that your browser is a fork of Firefox.
Cheers,
Adrienn
GitHub Support
I worry that coders are becoming comfortable (like a couch potato is on their couch, irritated when they are asked to stand up) with not having to be browser-neutral. After all, if (to all intents and purposes) everything is Chrome, then why would someone who has spent the last several years just coding for Chrome bother coding for anything else whatsoever?
Windows 7 SP1 X64
Windows 10 LTSC X64
Windows 10 LTSC X64
Re: PM 28.14.2 Github
Off-topic:
Google wants to eliminate any browser that does not run on their technology. But coders that are unaffiliated with Google may merely be becoming utterly accustomed to writing code just for Chrome and pretty much nothing else.
Microsoft has, since the dawn of Windows 10, adopted a Google-like approach to their consumers. Since they use Chromium for their Microsoft Edge browser, and since only Chrome and a Chrome clone exist as "mainstream browsers" these days, they would not want to bother coding for anything else.
Google wants to eliminate any browser that does not run on their technology. But coders that are unaffiliated with Google may merely be becoming utterly accustomed to writing code just for Chrome and pretty much nothing else.
Microsoft has, since the dawn of Windows 10, adopted a Google-like approach to their consumers. Since they use Chromium for their Microsoft Edge browser, and since only Chrome and a Chrome clone exist as "mainstream browsers" these days, they would not want to bother coding for anything else.
Re: PM 28.14.2 Github
Off-topic:
Sorry to be irreverent, but when I see JustOff I am mentally starting to read that moniker as which is really unfortunate as I actually want to thank them as a life-saver in this situation...
Sorry to be irreverent, but when I see JustOff I am mentally starting to read that moniker as
Re: PM 28.14.2 Github
Please, what is your ajax bypass userscript?
Re: PM 28.14.2 Github
As of today, there is no need for additional scripts when using GitHub Web Components Polyfill.
Re: PM 28.14.2 Github
My userscript serves two things one is ajax loading of an unchecked direct call to shadowDom and because it foils all ajax loading it actually improves performance so don't shit on my userscript, insect.