Search results

  1. ibnesayeed

    Third party Insert link keyboard shortcut loses focus and inserts link at the end

    To reproduce: write some text in the RTE then highlight part of it (somewhere in the middle) hit Ctrl + K to open insert link menu and notice that the URL field is missing the automatic focus click in the URL field and add a URL in it hit Enter to insert the link and notice that the hyperlink...
  2. ibnesayeed

    Necessary and recommended PHP extensions for XF 2.1

    If we were to setup a Linux box for state-of-the art XF 2.1 environment from scratch and wanted to use PHP 7.2 (or 7.3 when out), what would be mandatory, recommended, and nice to have PHP extensions (or other libraries/packages)? We would like to keep the system minimal (as in no unnecessary...
  3. ibnesayeed

    XF 1.5 Image Proxy Loads Images Partially

    In our forum some images are cached partially. Only about one third or half of the image from the top is rendered while the image reports the height properly. I think the allowed image size is not an issue. Is it possible that the proxy timed out when fetching the image for caching?
  4. ibnesayeed

    Do we still need jQuery in XenForo?

    Gone are the days when browsers were intentionally implementing features in an incompatible way from each other for market dominance and monopoly. As a result, making the life of developers difficult who would like to support all browsers. And jQuery was born to rescue! Since then browsers came...
  5. ibnesayeed

    Not a bug XSS vulnerability in jQuery version used in XF 1.5

    XF 1.5.21 (and some older versions) use jQuery 1.11.0 which has a known XSS security vulnerability of medium severity.
  6. ibnesayeed

    XenForo Performance Audit

    Today, I ran Google Chrome DevTools' built-in Lighthouse audit on the page a few times. The results were not very encouraging. Things are little better when the same audit is performed as a guest, but when logged in, various scores go down. Following is the...
  7. ibnesayeed

    Lack of interest Add xf:addon-download CLI command in cmd.php

    To automate the process of add-on installation/upgrade, a crucial step is to first acquire them from different places. The popularity of add-ons like Add-on Install & Upgrade shows their usefulness. However, they require certain directories to be writable by the user under which the web server...
  8. ibnesayeed

    Lack of interest CLI cmd.php xf:addon-* batch process

    Currently, all of the xf:addon-* commands work on one add-on at a time (except enable/disable which default to all when no ID is specified). I am proposing the following changes for ease and uniformity. Allow a list of space separated add-on IDs to all the addon-* commands (like, xf:addon-* foo...
  9. ibnesayeed

    Password-less Login Using Web Authentication API (WebAuthn)

    As many web browser vendors (including Google Chrome, Firefox, and Microsoft Edge) are pushing forward for the support of the Web Authentication API (WebAuthn), it would be good to experiment with a more secure and less frustrating password-less authentication experience using asymmetric...
  10. ibnesayeed

    Lack of interest Add support for Server Timing API

    While XF shows some inline timing information in the debug mode, it might be a good idea to also provide that information using the recent Server Timing API. This will allow better performance evaluation within browsers' developer tools across a session, not just on a single page. Some modern...
  11. ibnesayeed

    Not a bug Embedded videos from Vimeo are missing in Have you seen forum

    In the anticipation of new "Hello, this is @Kier from XenForo" videos, I visited a few old threads in the Have you seen...? forum, but the videos were missing. I did not see any errors in the browser console. When I tried quoting those messages, I was able to see the embedding BBCode such as ...
  12. ibnesayeed

    As designed [ACP] Inconsistent User Communication Experience

    In the ACP, under Communication section when we create a new Notice and click Save button without filling any form fields, we get an overlay modal window that describes what went wrong (i.e., to fill title and message fields with valid data). However, when we go to Alert users, Email users, or...
  13. ibnesayeed

    Fixed Click to expand is missing in some quotes with iframes

    As observed in the above post, quoted post that has Flickr image does not show "Click to expand..." option. This perhaps would be true for many embedded resources that use an iframe.
  14. ibnesayeed

    Not planned GraphQL API for XenForo

    I am a big promoter of REST APIs (not just HTTP APIs), for which there is already a very popular feature request thread, Full native RESTful API built into XenForo. However, I have been exploring Facebook's GraphQL lately and found it very interesting and efficient in certain situations. XenForo...
  15. ibnesayeed

    Lack of interest Optimize Requirements Test File for CLI

    Currently, the requirements test script assumes that a web server with PHP support is in place, hence it spits out formatted HTML page. It might be handy to have the output optimize for CLI, only when the context of the script invocation is CLI.
  16. ibnesayeed

    Fixed XenForo 2.0 Requirements Test Contains __MACOSX Directory

    The file contains __MACOSX directory. I think it is not really a bug, but unnecessary.
  17. ibnesayeed

    Add sent email count in the ACP statistics plots

    It would be very useful to be able to see the number of outgoing emails generated from XF instance. This would help people to decide when choosing from various SMTP providers. Also, if the types of emails are also counted separately, admins can better tweak configurations to optimize...
  18. ibnesayeed

    How to check daily sent email count?

    Is there an option in the ACP to find out how many emails our XF instance is generating daily or monthly? I can check it in my email server, but I don't see such options in XF ACP itself.
  19. ibnesayeed

    Optional Repository URL for Resources

    Some resources here are opensource and exist on GitHub. It might be helpful to have an optional custom field to provide a URL to point to the corresponding repo. This (or similar) field can also be used to provide support link for commercial resources. Currently, people provide such info in the...
  20. ibnesayeed

    Content-addressable attachment for deduplication

    One advantage of having xf_attachment and xf_attachment_data tables separate is to be able to deduplicate contents. However, its utilization currently is very limited. A content-addressable identifier (e.g., md5, sha1, or sha256 or any other hash) in the xf_attachment_data table can enable true...