venta | Reading

You're viewing

venta's Reading Page
Create a Dreamwidth Account Learn More

Reload page in style: light

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 74a18ba0b892ad7b298d6a0b9df9d56d11c13101 https://github.com/dreamwidth/dreamwidth/commit/74a18ba0b892ad7b298d6a0b9df9d56d11c13101 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-14 (Sat, 14 Feb 2026)

Changed paths: M views/interests/enmasse.tt

Log Message:

Fix checkbox state on en masse interests form (#3478) (#3516)

Co-authored-by: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: f4656cf07ede0feee4d6e3b108d23a616861581b https://github.com/dreamwidth/dreamwidth/commit/f4656cf07ede0feee4d6e3b108d23a616861581b Author: Mark Smith mark@dreamwidth.org Date: 2026-02-14 (Sat, 14 Feb 2026)

Changed paths: M CLAUDE.md

Log Message:

Add pre-push check instructions to CLAUDE.md

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: d21285eacd4a10fb4ce106cbefa5f10811376a6a https://github.com/dreamwidth/dreamwidth/commit/d21285eacd4a10fb4ce106cbefa5f10811376a6a Author: Mark Smith mark@dreamwidth.org Date: 2026-02-14 (Sat, 14 Feb 2026)

Changed paths: M CLAUDE.md

Log Message:

Add PR format and commit signing instructions to CLAUDE.md

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

Before getting myself onto the mat: all is woe, everything is too much and takes too long, I Cannot Face Cooking, we shall be forced to Resort to Sad Pasta

Ten minutes after getting myself onto the mat and starting moving: ... actually, you know what, stir-frying the purple sprouting broccoli with Stuff sounds both achievable and Vastly More Appealing, scratch the Sad Supermarket plan

It was just warm-up! I hadn't even got the endorphins going yet!

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 27bf64affee672e39f361826ab22fa37d9d34a06 https://github.com/dreamwidth/dreamwidth/commit/27bf64affee672e39f361826ab22fa37d9d34a06 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M cgi-bin/Apache/LiveJournal.pm M cgi-bin/Plack/Middleware/DW/SecurityHeaders.pm

Log Message:

Add Referrer-Policy: same-origin header to prevent username leaks

Fixes #3472

When users click external links from their reading page, the browser sends a Referer header containing their subdomain (e.g., bob.dreamwidth.org), allowing external sites to identify individual Dreamwidth users who clicked the link.

Adding Referrer-Policy: same-origin suppresses the Referer header for all cross-origin requests while preserving it for same-origin navigation. Since usernames are embedded in subdomains, weaker policies like origin-when-cross-origin or strict-origin would still leak the username.

Applied globally (not just reading pages) because external links can appear on any page -- entries, comments, profiles, etc.

Audited all Referer header usage in the codebase: - LJ::check_referer() (used ~15 places for CSRF): safe, returns true when referer is absent - Login ret=1 redirect: already broken (reads header_out not header_in) - OpenID continue_to: returnto param is primary, referer is fallback - EditIcons factory check: same-origin, unaffected - Media hotlink protection: check_referer passes on empty referer - VGift/Admin VGift: unaffected (same-origin or handles empty referer) - Tracking management: minor cosmetic impact only (cancel button and viewing style args lost for cross-subdomain navigation)

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 7cdad0c67e2136733120d6331c8e55ffdf1bdae6 https://github.com/dreamwidth/dreamwidth/commit/7cdad0c67e2136733120d6331c8e55ffdf1bdae6 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M cgi-bin/DW/Controller/Manage/Profile.pm M views/manage/profile.tt

Log Message:

Fix inability to remove retired "other sites" from profile (#3475)

The profile edit page never showed legacy userprop-based services (like ICQ) because the template checked IF profile_accts which is always truthy (empty hash ref). Changed to IF profile_accts.size to match the logic in ProfilePage.pm. Also fixed the legacy branch's missing counter parameter and increment, and guarded against inserting empty rows when clearing a legacy entry.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: f66c51a5054ba9a085cd671abc8a3bc8d63223dc https://github.com/dreamwidth/dreamwidth/commit/f66c51a5054ba9a085cd671abc8a3bc8d63223dc Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M cgi-bin/DW/Controller/Poll.pm

Log Message:

Fix multi-answer polls only recording last selected option

The poll form POST handler used Hash::MultiValue's hash access to read checkbox values, which only returns the last value per key. Flatten the Hash::MultiValue into a regular hash with comma-joined values, matching how the RPC/AJAX handler already does it. This only affected the non-JS form submission path.

Closes #3473

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 094b2bd3a714dc1dc7b53af1b674d5854f801804 https://github.com/dreamwidth/dreamwidth/commit/094b2bd3a714dc1dc7b53af1b674d5854f801804 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M cgi-bin/DW/Logic/ProfilePage.pm M cgi-bin/DW/Logic/UserLinkBar.pm M cgi-bin/LJ/Event/UserMessageRecvd.pm M cgi-bin/LJ/User/Message.pm

Log Message:

Make private message links respect remote's beta inbox selection

Centralize the inbox beta check in message_url and update all locations that build compose URLs: profile page, user link bar, hoverbox RPC, and email/inbox notification reply links.

Closes #3491

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 8dbf8e57d9d5450a9f7ea6866e3d65892b6ab25a https://github.com/dreamwidth/dreamwidth/commit/8dbf8e57d9d5450a9f7ea6866e3d65892b6ab25a Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M cgi-bin/LJ/Widget/ShopCart.pm

Log Message:

Fix undef error viewing cart in admin pay view

The admin_col and is_random closures in ShopCart.pm used $_ to access the cart item, but Template Toolkit passes arguments via @, not $. This caused admin_col to crash with "Can't call method 'id' on an undefined value" and is_random to silently always return 'N'.

Closes #3509

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: b8e245b8b1d1f0aba6ec605a73a0e1dfc2227833 https://github.com/dreamwidth/dreamwidth/commit/b8e245b8b1d1f0aba6ec605a73a0e1dfc2227833 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M bin/upgrading/en.dat M views/create/account.tt.text

Log Message:

Add South Carolina to under-18 signup restriction

SC passed a law requiring parental monitoring for under-18 users. Update signup strings to include SC alongside TN.

Closes #3513

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: a182d9895fbc8e9709c71c4e4361f1ba83afec23 https://github.com/dreamwidth/dreamwidth/commit/a182d9895fbc8e9709c71c4e4361f1ba83afec23 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-12 (Thu, 12 Feb 2026)

Changed paths: M .github/workflows/ci.yml M app.psgi M cgi-bin/Apache/LiveJournal.pm A cgi-bin/DW/API/RateLimit.pm M cgi-bin/DW/Controller/API/REST.pm M cgi-bin/DW/Controller/API/REST/Journals.pm A cgi-bin/DW/RateLimit.pm M cgi-bin/LJ/Console/Command/Suspend.pm M cgi-bin/LJ/Test.pm A cgi-bin/Plack/Middleware/DW/RateLimit.pm M doc/dependencies-cpanm M doc/raw/memcache-keys.txt M etc/config.pl.example A t/rate-limit.t

Log Message:

Rate Limiting (#3490)

Add basic rate limiting module
Add configuration overrides

This enables rate limits to be overridden.

Add API rate limit basics
Update Apache rate limiting to use new DW::RateLimit API

Move rate limiting after start_request() so get_remote() works, switch to rate-string API and check() method. Also restore approvenew setting lost during rebase.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

Add Plack rate limiting middleware

Port rate limiting from Apache::LiveJournal to a Plack middleware so it works under Starman. Same rates: 100/60s authenticated, 30/60s anonymous. Wired in after DW::Sysban in app.psgi.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

Fix tidy formatting in rate limiting code

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

Add rate limit tests to CI workflow

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

Add CPAN dependency install step to CI workflow

The devcontainer image bakes dependencies at build time, so new deps added in a PR aren't available until the image rebuilds. Running cpm install from the checked-out dependencies-cpanm ensures CI always has the right modules for the code under test.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

diffrentcolours

I haven't posted on Facebook for about a year, since they announced that they were no longer even pretending to moderate queerphobia. But I've checked in there about once a week to catch up on close friends, and it's been a useful source of events. Since they've now insisted that users pay or get even more stalked / used to feed the LLM / GenAI machine, I've decided to just download my data (including photos etc.) and delete my account. I'm aware that I'm cutting myself off from some people this way, but most of them I've got other ways to talk to - mostly via Signal or WhatsApp.

This is happening about the same time as Discord are announcing various changes. I'm already using a SOCKS proxy based in Germany to circumvent their age restriction requirements, but that may stop being effective soon, or they may again be feeding everything into the GenAI behemoth. There's a good chance I'm going to have to disengage with Discord in the next few weeks.

I'm worried that this is going to cut me off from some other communities. The Manchester-based Discord has been a bit dead since a big argument a few months ago caused a schism, and neither it nor its supposed replacement managed critical mass. So that's not much of a concern. And I quit the UTAW Discord when I resigned.

But the Doof uses Discord for its Thursday evening stream chat, and I'll really miss that. I've been suggesting to communities that they move to Zulip, who provide a free tier much like Discord, but which is also Free Software, self hostable, and supports migrating between installs. I even set one up for the Doof. But nobody's even interested in trying it out so far. Discord is also a place where some queer and Covid-cautious activism happens and I'll be sad to miss that too.

Still, concentrating on the positives, I have friends from real-life things like Queer Club and the gym, who I talk to over Signal or WhatsApp, and I've just prompted a meetup of local gym buds for brunch in a few weeks. I'm playing a D&D campaign with P and friends every couple of weeks. I chat with people on the Fediverse. Even if I do lose out on communities currently based on Discord, I'm not going to be totally cut off.

a shelf fungus at the base of a tree, shading from brown in the centre via rich orange to pale yellow at the edge

a clump of purple crocuses, nestled between tree roots

a clump of snowdrops, with the green tips of the inner petals clearly visible

(Which last I took in part because A only discovered last week that many snowdrops have decorative green bits on their frilly inner noses, courtesy of a waist-high planter outside one of our local pubs!)

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: afbef380e3688886c022553c1ac994a9b999dc37 https://github.com/dreamwidth/dreamwidth/commit/afbef380e3688886c022553c1ac994a9b999dc37 Author: Mark Smith mark@dreamwidth.org Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M bin/upgrading/proplists.dat A cgi-bin/DW/Controller/Admin/Approve.pm M cgi-bin/DW/Controller/Create.pm M cgi-bin/DW/Hooks/PrivList.pm M cgi-bin/DW/Hooks/SiteSearch.pm M cgi-bin/DW/Setting/GlobalSearch.pm M cgi-bin/LJ/Console/Command/Suspend.pm M cgi-bin/LJ/Console/Command/Unsuspend.pm M cgi-bin/LJ/User/Account.pm M cgi-bin/LJ/User/Permissions.pm M etc/config.pl.example A views/admin/recent_accounts/review.tt A views/admin/recent_accounts/review.tt.text A views/admin/recent_accounts/suspend.tt A views/admin/recent_accounts/suspend.tt.text A views/admin/recent_accounts/user.tt A views/admin/recent_accounts/user.tt.text

Log Message:

Add /admin/recent_accounts for screening new accounts for spam

Adds an account approval system to screen new accounts for SEO spam. New accounts get a not_approved property set on creation. Admins can review accounts at /admin/recent_accounts, approving or flagging them. Flagged accounts can be batch-suspended. Unapproved accounts are excluded from site search, latest feeds, and random user display.

Review fixes: changed not_approved property from clustered (cldversion 4) to global (cldversion 0) and query userproplite instead of userproplite2; fixed suspend:recent priv check to allow users with both suspend:recent and suspend:openid to still use the console for OpenID suspensions.

Fixes #2824

Co-Authored-By: Kareila kareila@dreamwidth.org Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 69b73bb3371d17d9d80379a20356e89a55abe86f https://github.com/dreamwidth/dreamwidth/commit/69b73bb3371d17d9d80379a20356e89a55abe86f Author: Mark Smith mark@dreamwidth.org Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M cgi-bin/DW/External/Site.pm M cgi-bin/DW/External/Site/Delicious.pm M cgi-bin/DW/External/Site/Diigo.pm M cgi-bin/DW/External/Site/Imzy.pm M cgi-bin/DW/External/Site/Inksome.pm M cgi-bin/DW/External/Site/JournalFen.pm M cgi-bin/DW/External/User.pm R htdocs/img/external/imzy.png R htdocs/img/external/ink-community.gif R htdocs/img/external/ink-userinfo.gif

Log Message:

Style dead external services as unavailable

For dead external services (del.icio.us, Diigo, Imzy, Inksome, JournalFen), show a generic userhead icon and unlinked username with [SiteName] suffix instead of linking to the dead site. Remove unused site-specific icons for dead services.

Fixes #3139 Closes #3056

Co-Authored-By: Carly Ho carlymho@fastmail.com Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 9c0e887414aecc86bf0d5b8762ac99392cb5deda https://github.com/dreamwidth/dreamwidth/commit/9c0e887414aecc86bf0d5b8762ac99392cb5deda Author: Mark Smith mark@dreamwidth.org Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M bin/upgrading/en.dat A cgi-bin/DW/Controller/Manage/Tracking.pm A cgi-bin/DW/Hooks/SubscriptionNotifOpts.pm A cgi-bin/DW/Hooks/SubscriptionStats.pm M cgi-bin/LJ/User/Message.pm M cgi-bin/LJ/Web.pm M htdocs/manage/settings/index.bml M htdocs/manage/settings/index.bml.text R htdocs/manage/tracking/comments.bml R htdocs/manage/tracking/comments.bml.text R htdocs/manage/tracking/entry.bml R htdocs/manage/tracking/user.bml A views/tracking/manage.tt A views/tracking/manage.tt.text A views/tracking/settings-interface.tt A views/tracking/settings-interface.tt.text A views/tracking/subscribe-interface.tt A views/tracking/subscribe-interface.tt.text

Log Message:

Modernize subscribe interface and convert tracking pages to TT

Move subscribe_interface HTML from LJ/Web.pm into TT templates, extract subscription logic into LJ::User::Message methods and hooks, convert 3 BML pages under /manage/tracking to TT controllers, and simplify /manage/settings notification code.

Add form_auth check to tracking controller and use LJ::check_referer for referer validation.

Fixes #3217

Co-Authored-By: Kareila kareila@dreamwidth.org Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 6dbc0529ac979d75453e49ab16fa870ef0bb736e https://github.com/dreamwidth/dreamwidth/commit/6dbc0529ac979d75453e49ab16fa870ef0bb736e Author: Mark Smith mark@dreamwidth.org Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M cgi-bin/DW/Logic/ProfilePage.pm M views/profile/logic.tt.text

Log Message:

Hide website link for accounts younger than ten days

Hide the website URL on user profiles for accounts less than 10 days old to deter SEO spammers. Accounts with the suspend priv can always see the link. The account owner sees a message explaining why their link is hidden.

Fixes #2795 Original PR: #3142

Co-Authored-By: Carly Ho carlymho@fastmail.com Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/dependabot/npm_and_yarn/api/js-yaml-4.1.1 Home: https://github.com/dreamwidth/dreamwidth

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 1b02ca4c855c2fd71afa35cfd982cd9bec3d0b27 https://github.com/dreamwidth/dreamwidth/commit/1b02ca4c855c2fd71afa35cfd982cd9bec3d0b27 Author: dependabot[bot] <49699333+dependabot[bot]users> Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M api/package-lock.json

Log Message:

Bump js-yaml from 4.1.0 to 4.1.1 in /api (#3507)

Bumps js-yaml from 4.1.0 to 4.1.1. - Changelog - Commits

github posting in

Branch: refs/heads/main Home: https://github.com/dreamwidth/dreamwidth Commit: 488fbe1d38a7190c1389c7c0c0a38b9f2c639a73 https://github.com/dreamwidth/dreamwidth/commit/488fbe1d38a7190c1389c7c0c0a38b9f2c639a73 Author: Jen kareila@dreamwidth.org Date: 2026-02-10 (Tue, 10 Feb 2026)

Changed paths: M cgi-bin/DW/Controller/MassPrivacy.pm

Log Message:

proper display of error messsages on the editprivacy page (#3505)

To unsubscribe from these emails, change your notification settings at https://github.com/dreamwidth/dreamwidth/settings/notifications

Profile

venta

December 2025

S	M	T	W	T	F	S
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31

Most Popular Tags

Page Summary

github in changelog - [dreamwidth/dreamwidth] 74a18b: Fix checkbox state on en masse interests form (#34...
github in changelog - [dreamwidth/dreamwidth] f4656c: Add pre-push check instructions to CLAUDE.md
github in changelog - [dreamwidth/dreamwidth] d21285: Add PR format and commit signing instructions to C...
kaberett - [movement] amusement
github in changelog - [dreamwidth/dreamwidth] 27bf64: Add Referrer-Policy: same-origin header to prevent...
github in changelog - [dreamwidth/dreamwidth] 7cdad0: Fix inability to remove retired "other sites" from...
github in changelog - [dreamwidth/dreamwidth] f66c51: Fix multi-answer polls only recording last selecte...
github in changelog - [dreamwidth/dreamwidth] 094b2b: Make private message links respect remote's beta i...
github in changelog - [dreamwidth/dreamwidth] 8dbf8e: Fix undef error viewing cart in admin pay view
github in changelog - [dreamwidth/dreamwidth] b8e245: Add South Carolina to under-18 signup restriction
github in changelog - [dreamwidth/dreamwidth] a182d9: Rate Limiting (#3490)
diffrentcolours - Losing Community?
kaberett - [picspam] from yesterday's trudge in the rain
github in changelog - [dreamwidth/dreamwidth] afbef3: Add /admin/recent_accounts for screening new accou...
github in changelog - [dreamwidth/dreamwidth] 69b73b: Style dead external services as unavailable
github in changelog - [dreamwidth/dreamwidth] 9c0e88: Modernize subscribe interface and convert tracking...
github in changelog - [dreamwidth/dreamwidth] 6dbc05: Hide website link for accounts younger than ten days
github in changelog - [dreamwidth/dreamwidth]
github in changelog - [dreamwidth/dreamwidth] 1b02ca: Bump js-yaml from 4.1.0 to 4.1.1 in /api (#3507)
github in changelog - [dreamwidth/dreamwidth] 488fbe: proper display of error messsages on the editpriva...

Style Credit

Style: Neutral Good for Practicality by timeasmymeasure

Expand Cut Tags

No cut tags

Page generated Feb. 17th, 2026 04:10 am

Powered by Dreamwidth Studios