Is This a Security Issue?

March 18th, 2007

More interesting results from yesterday’s experiments with dumping some markup in the title of a post and seeing what breaks. I noticed the markup made its way into the WordPress Admin section. Is that just because the markup I used (strong and span tags) was relatively innocuous or is there a potentially deeper problem? Let’s find out.
Read the rest of this entry »

A Strong Test for Markup In Titles & Summaries

March 17th, 2007

I’ve been hacking on Benjamin Smedberg’s Atom 1.0 plug-in for WordPress. I’ve added a preference panel for choosing between full text and summary feeds. Now I’ve fixed the double escaping of content in titles and summaries. (Escaped HTML is evil and should never have been allowed into Atom.)

However I’m not sure how my hack will react when posts contain markup in titles and summaries so I’m playing with that now. Hence this post. I may delete it once I’m convinced I’ve covered the various special cases well enough.

Things may look a little funny in the feed until I’m done since I’ll be deliberately breaking things to see how WordPress behaves.
Read the rest of this entry »

Buffy Fix

March 16th, 2007

I stumbled across the first issue of Season 8 by Joss Whedon at the Forbidden Planet this afternoon. <span style="voice-family: comic book guy, male;}">Best Comic Book Adaptation Ever!</span>.

The Long Way Home, Part 1
Read the rest of this entry »

Speeding Up This Site

March 16th, 2007

I know this site is more than a little slow on occasion. I also know that the static site www.xom.nu which is hosted on the exact same server runs like a bat out of hell, so it’s likely not the server hardware (Mac Mini) or network connection (Speakeasy DSL) that’s at fault. The remaining candidates are:

  • PHP (Very likely)
  • WordPress (Maybe, but unlikely except in so far as it’s written in PHP)
  • Traffic volume (especially comment spammers)
  • MySQL (Possible, but I tend to doubt it.)

I’ve got a lot of suggestions for improving performance, and I plan to start trying some of them. I don’t, however, have any good measurements of where this server is spending its time. I’d appreciate it if anyone could share knowledge and experience as to how to determine where the server is taking it’s time, and how to find out what’s making it so slow. Thanks.
Read the rest of this entry »

Birding at SD 2007

March 15th, 2007

So far this year I’ve had little time to bird anywhere other than Prospect Park, which, while pretty, gets a little repetitive. (I did get a life bird there a couple of weeks ago though.) Thus I’m really looking forward to getting out and doing some California birding in the upcoming week while I’m in Santa Clara for Software Development 2007 West. Looking at my schedule I have three full days open, and maybe a little extra time here and there.

Here are my tentative plans. Schedule will be adjusted to fit the weather, tides, wind conditions, and such. If any locals would like to guide/escort/tag along please drop me e-mail. It’s always nice to have company. Also if anyone has suggestions for sites I’m missing, or information about tides, best viewing spots, local mailing lists and rare bird alerts, etc. please leave a comment.

Also it would be helpful to know which of my target species are hopeless at this time of year. I will be back in May so I can try for some of these later.

Read the rest of this entry »

Best Tools for Checking Web Accessibility

March 14th, 2007

I’m now working on the accessibility chapter of Refactoring HTML. I’d like to mention some automated tools for checking accessibility. The W3C lists a couple of dozen. Which are the best? If you had to pick just two or three, which would you choose?
Read the rest of this entry »

Currently Reading