add thought
This commit is contained in:
gnat
parent
cc0cab843a
commit
d8b6d38414
@ -3,7 +3,7 @@
|
||||
<h2>it is annoyed by this medium</h2>
|
||||
<hr>
|
||||
this medium presents thoughts in a 1 dimensional manor without an ergonomic way to link between different posts.
|
||||
this annoys it because it generally tend to think of information such that each concept is a node and each relationship between concepts is an edge between those nodes on a two dimensional graph.
|
||||
this annoys it because it generally tends to think of information such that each concept is a node and each relationship between concepts is an edge between those nodes on a two dimensional graph.
|
||||
the format of this webpage does not allow for such structure due to the linearity.
|
||||
<hr>
|
||||
perhaps a "digital garden" or similar system would be a better means of managing this page.
|
||||
|
||||
44
html/thoughts/meta-2
Normal file
44
html/thoughts/meta-2
Normal file
@ -0,0 +1,44 @@
|
||||
<!-- TITLE: re: metapost; things resembling an improvement -->
|
||||
<!-- DATE: 2024-10-21 05:01:21 -->
|
||||
natalie has created an alternative means of viewing thoughts. $[make-footnote "$(make-link '/html/view-thought.html' 'find it here')"]
|
||||
this new method improves upon its complaint regarding linearity in the last metapost by creating a system by which each post can be viewed as its own page.
|
||||
this in theory adds for ergonomic linking between posts, though doing so would somewhat deprecate the prior means of viewing them in favor of the new means.
|
||||
it is not sure how to feel about this.
|
||||
$[put-footnotes]
|
||||
<hr>
|
||||
its new means of thought viewing relies on some absolutely cursed code, it is very amused by this.
|
||||
<pre>
|
||||
<span class="-punctuation-bracket">(</span><span class="-function-macro">defun</span> <span class="-variable"><span class="-function">html</span></span> <span class="-punctuation-bracket">(</span><span class="-punctuation-bracket">)</span>
|
||||
<span class="-punctuation-bracket">(</span><span class="-variable">page</span> <span class="String">"$[echo '$'][test \"$(echo '{' 'thought' '}' | sed 's/ //g')\" != '{thought}' && echo '{thought}' || echo thoughts index]"</span>
|
||||
<span class="-string-escape">`</span><span class="-punctuation-bracket">(</span><span class="-variable">section</span> <span class="-punctuation-bracket">(</span><span class="-punctuation-bracket">)</span>
|
||||
<span class="String">"$[echo '$'][echo > /tmp/footnote_count]"</span>
|
||||
<span class="-punctuation-bracket">(</span><span class="-variable">h1</span> <span class="-punctuation-bracket">(</span><span class="SpecialChar"><span class="-punctuation-special">:</span>style</span> <span class="String">"display: $[echo '$'][test \"$(echo '{' 'thought' '}' | sed 's/ //g')\" != '{thought}' && echo block || echo none]"</span><span class="-punctuation-bracket">)</span> <span class="String">"$[echo '$'][cat ./html/thoughts/$(basename '{thought}') | grep '<!-- TITLE:' | sed 's/<!-- TITLE://; s/-->//']"</span><span class="-punctuation-bracket">)</span>
|
||||
<span class="String">"$[echo '$'][cat ./html/thoughts/$(basename '{thought}') | grep '<!-- DATE:' | sed 's/<!-- DATE://; s/-->//']"</span> <span class="-punctuation-bracket">(</span><span class="-variable">br</span><span class="-punctuation-bracket">)</span>
|
||||
<span class="-punctuation-bracket">(</span><span class="-variable">div</span> <span class="-punctuation-bracket">(</span><span class="-punctuation-bracket">)</span> <span class="String">"$[echo '$'][include \"./html/thoughts/$(basename '{thought}')\"]"</span><span class="-punctuation-bracket">)</span>
|
||||
<span class="String">"$[echo '$'][test \"$(echo '{' 'thought' '}' | sed 's/ //g')\" != '{thought}' || (echo '<h1>thoughts:</h1>'; ls ./html/thoughts | while read -r file; do echo \"<p>$(cat ./html/thoughts/$file | grep '<!-- DATE:' | sed 's/<!-- DATE://; s/-->//') <a href=?thought=$file>$(cat ./html/thoughts/$file | grep '<!-- TITLE:' | sed 's/<!-- TITLE://; s/-->//')</a></p>\"; done | sort --numeric --reverse)]"</span><span class="-punctuation-bracket">)</span><span class="-punctuation-bracket">)</span><span class="-punctuation-bracket">)</span>
|
||||
|
||||
</pre>
|
||||
<details>
|
||||
<summary>
|
||||
this compiles to the following:
|
||||
</summary>
|
||||
<pre><xmp>
|
||||
$[cat ./html/view-thought.html]
|
||||
</xmp></pre>
|
||||
</details>
|
||||
a particularly amusing bit of this is <pre>
|
||||
<span class="String">"$[echo '$'][test \"$(echo '{' 'thought' '}' | sed 's/ //g')\" != '{thought}'</span>
|
||||
</pre>
|
||||
the reason the presence of the thought being set via the url parameter is checked like that is because comparing '{thought}' to '{thought}' would always be true.
|
||||
when an html file contains a variable that the server does not have present when parsing the file, the variable is left as it is instead of being set to ''.
|
||||
accordingly, we cannot do something like <code>test -z '{thought}'.</code>
|
||||
<br><br>
|
||||
one may think "natalie, is it not dangerous to run bash on user input supplied via url param? could one not send a request like the following: <pre>https://natalieee.net/html/view-thought.html?thought=python-goto%27;while%20true;%20do%20echo%20foo%20%3E%3E%20aoeu;%20done;%27</pre>"
|
||||
the answer to such a thought is "yes, this is bad".
|
||||
this badness should(?) be mitigated by the fact that it is impossible to get the server to process a ' in the request params. this hopefully makes RCE impossible, if not email it, please.
|
||||
<hr>
|
||||
another interesting feature of this new format is that it would allow for reasonable per-post comments.
|
||||
this seems like it would be a good feature.
|
||||
of course, no one actually reads these, but whatever.
|
||||
per post comments would still be interesting, it could continue its tradition of refusing to use a database for absolutely no reason.
|
||||
per post comments would also make the view-thought.html file even more cursed, which is amusing to it.
|
||||
Loading…
Reference in New Issue
Block a user