01:13
<MikeSmith>
hmm, problem with irc.mozilla.org right now?
01:13
<MikeSmith>
seem to have lost my connection
01:13
<MikeSmith>
"Unable to connect server irc.mozilla.org port 6667 [Connection refused"
01:14
<heycam>
MikeSmith, bunch of irccloud users seemed to disconnect but are coming back now
01:15
<MikeSmith>
k
01:15
<capella>
ah, thoug it was just me
01:16
<MikeSmith>
ah looks like I'm back in now at least
05:00
<MikeSmith>
there's nothing wront with using a relative URL with xhr.open right?
05:09
<annevk>
MikeSmith: nope
05:27
<MikeSmith>
annevk: ok thanks
05:27
<MikeSmith>
oh hey reviewed your PR
05:27
<MikeSmith>
you got a fix to make there
05:47
<annevk>
MikeSmith: replied
05:48
<annevk>
MikeSmith: empty host is one of the new syntax constructs
05:48
<MikeSmith>
annevk: the problem isn't the empty host part
05:48
<MikeSmith>
look at the path
05:49
<MikeSmith>
you got "p/" there, literally
05:50
<MikeSmith>
sorry for not being more specific in the review comment
05:53
<MikeSmith>
I was just trying to make a Minimal Viable Comment, in the style that you and Ms2ger have pioneered
06:13
<annevk>
hehe
06:13
<annevk>
MikeSmith: pushed a typo fix, heading to the airport now...
10:09
<MikeSmith>
https://github.com/w3c/webcomponents/blob/gh-pages/proposals/shadow-dom-v1-in-blink.md
10:09
<MikeSmith>
hayato++
14:08
<mounir>
Ms2ger: ping
14:08
<Ms2ger>
Here for a minute
14:15
<mounir>
Ms2ger: nm then
18:07
<wanderview>
Domenic: sadly twitter cards don't support svg images like the streams icon
18:07
<wanderview>
TIL
18:37
<Domenic>
svg support on websites is a travesty in general
18:37
<Domenic>
never have been able to upload a svg profile picture anywhere, for example
19:12
<JoWie>
svg allows for javascript right
22:46
<pdr>
JoWie, svg allows for javascript but not when svg is used as an image <img src="svg.svg">
22:47
<JoWie>
Ah great, i was too paranoid to allow svg uploads
22:48
<pdr>
JoWie, yeah by spec svg as image is a little special. It's its own world down there and can't request resources either
22:54
<JoWie>
So what if someone opens an svg directly? E.g. someone uploads a svg and sends links to it to people
22:55
<pdr>
JoWie, then the javascript will run
22:57
<JoWie>
Ah so still a bad idea
23:18
<JoWie>
Content-Disposition + CSP will help, but it still feels like a potential landmine