Textpattern CMS demo site

gaekwad · 2019-10-09 14:45:31

Expect some turbulence on release-demo and beta-demo as I continue to work on migrating to MySQL 8.0. I will endeavour to minimise disruption. I anticipate it’ll be 3-4 hours.

Last edited by gaekwad (2019-10-09 14:45:55)

phiw13 · 2019-10-10 04:48:53

gaekwad wrote #319585:

I will fix this now – thanks for the report.

Edit: strangely, the unsafe-inline directive is present already. More investigation needed.

Still an issue as I pen this – Safari / Firefox.

The unsafe-inline is not yours actually, it comes from a Safari extension that injects some (innocent) script in the page. (Safari extension is StopThemadness)

On Firefox (latest release) I had an additional issue, with the browser complaining about the TLS / certificate. (both on textpattern.co/demo and TXP4.8dev demo). A reload fixed this. I had previously visited both in the same session, ~24hours ago).

gaekwad · 2019-10-10 10:32:35

phiw13 wrote #319606:

On Firefox (latest release) I had an additional issue, with the browser complaining about the TLS / certificate. (both on textpattern.co/demo and TXP4.8dev demo). A reload fixed this. I had previously visited both in the same session, ~24hours ago).

Logistically, this is not surprising, and it should sort itself out.

The dev-demo site moved from an old server to a new server, and a new TLS cert was generated (see [1] and [2] for the details). The old server still has a valid TLS cert (see [3] and [4] for those details) for dev-demo, but since the DNS points it to the new server it’s a matter of a few days before stale DNS updates with a pointer to the new server.

I’ll check through the CSP again, I suspect my tired eyes are the culprit here. I know we’re looking at designing out some of the CSP gotchas in Textpattern, but I should refresh my notes on what’s needed to get a vanilla site up and running.

[1] crt.sh/?id=1969929078
[2] crt.sh/?id=1974550842
[3] crt.sh/?id=1923001958
[4] crt.sh/?id=1936907847

phiw13 · 2019-10-10 11:31:31

gaekwad wrote #319607:

I’ll check through the CSP again, I suspect my tired eyes are the culprit here. I know we’re looking at designing out some of the CSP gotchas in Textpattern, but I should refresh my notes on what’s needed to get a vanilla site up and running.

For the SVG images you need this (Apache syntax, don’t remember if NGinx is any different)

img-src 'self' data: * ;

gaekwad · 2019-10-10 11:33:15

phiw13 wrote #319608:

For the SVG images you need this (Apache syntax, don’t remember if NGinx is any different)

img-src 'self' data: * ;...

I just came here to say I’d found the issue and I was missing a data:! Small world, eh?

Please try now, it should be working.

phiw13 · 2019-10-10 11:36:08

gaekwad wrote #319609:

Please try now, it should be working.

Yes. now with SVG images all over the place (admin place…). Good.

gaekwad · 2019-10-10 11:40:21

phiw13 wrote #319610:

Yes. now with SVG images all over the place (admin place…). Good.

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN" "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
<!-- Creator: CorelDRAW -->
<svg xmlns="http://www.w3.org/2000/svg" xmlns:odm="http://product.corel.com/CGS/11/cddns/" xml:space="preserve" width="8.5in" height="11in" style="shape-rendering:geometricPrecision; text-rendering:geometricPrecision; image-rendering:optimizeQuality; fill-rule:evenodd"
     viewBox="0 0 8500 11000">
 <defs>
  <style type="text/css">
   <![CDATA[
    .str0 {stroke:#000000;stroke-width:3}
    .fil0 {fill:#000000}
   ]]>
  </style>
 </defs>
 <g id="Layer_1">
  <path class="fil0 str0" d="M7727 8644l-1133 0c-520,598 -1085,1036 -1692,1313 -191,16 -334,24 -425,24 -259,0 -552,-47 -881,-138l-272 138 -326 0c-744,0 -1117,-267 -1117,-798 0,-31 5,-75 15,-138 -546,-44 -821,-305 -821,-780 0,-51 5,-121 15,-212 -202,-57 -355,-148 -458,-275 -104,-124 -156,-285 -156,-477 0,-155 55,-324 166,-500 -272,-293 -409,-619 -409,-979 0,-415 225,-749 676,-1003 451,-251 1047,-378 1791,-378l189 0c-60,-456 -200,-897 -417,-1322l-122 -212c-262,-501 -394,-889 -394,-1161 0,-754 396,-1226 1192,-1413l220 -54 381 1687 1405 1495c96,112 261,327 500,645l212 280c228,309 389,498 482,565 94,70 244,104 451,104l889 0c272,580 409,1179 409,1790 0,596 -124,1198 -370,1799zm-252 -394c159,-461 236,-902 236,-1322 0,-495 -85,-982 -259,-1464 -637,0 -1036,-39 -1197,-114 -163,-75 -407,-342 -731,-798 -129,-176 -326,-428 -583,-749l-1526 -1625 -303 -1407c-508,174 -762,498 -762,975 0,246 85,515 259,803l98 168c397,659 594,1286 594,1884l8 213 -275 0c-803,0 -1410,80 -1814,238 -407,161 -609,402 -609,726 0,293 106,541 316,743 210,203 467,304 770,304l464 5 1376 -620c-208,-313 -487,-471 -837,-471 -91,0 -208,21 -348,59 -142,42 -308,104 -502,184l-358 16 -357 -381 616 -8c179,-75 340,-132 487,-166 146,-36 280,-54 402,-54 648,0 1122,329 1420,987l-259 122c319,156 565,430 738,819l-298 127c234,148 449,399 646,751l-469 221c256,189 464,453 622,798l-933 417c150,31 280,47 386,47l295 -8c674,-389 1221,-863 1641,-1420l1046 0zm-3462 -1101c-176,-236 -388,-389 -637,-454l-1132 508 -402 0c-381,0 -669,-54 -866,-161 -64,91 -98,179 -98,259 0,156 78,272 231,353 155,78 386,116 694,116l806 0 1404 -621zm319 888c-23,-31 -44,-57 -59,-77 -122,-140 -267,-252 -433,-332l-1164 516 -1228 -8 -23 98c0,298 295,449 889,449l570 0 1448 -646zm161 1024c-36,-44 -62,-80 -83,-106 -96,-138 -218,-259 -365,-371l-1086 485 -700 0 0 46c0,340 246,508 739,508l248 0 1247 -562z"/>
 </g>
</svg>

phiw13 · 2019-10-10 11:54:18

Ai sir, You got me working… here (a wee bit too large for my MBA screen).

Now back to enjoy dev-demo.

gaekwad · 2019-10-10 12:09:29

phiw13 wrote #319614:

Ai sir, You got me working…

Thank you for playing along!

gaekwad · 2019-10-10 16:58:59

I’m tinkering for a couple of hours — all demo sites might be a little unstable.

Thanks for your patience.

gaekwad · 2019-10-10 18:25:39

OK, I’m just about done tinkering. Some final CSP changes to check, then it’s all clear.

Here’s the latest: subject to DNS changes over the coming hours, release-demo is now located in Amsterdam and has a Percona (MySQL) 8.0 + PHP 7.3 stack. You shouldn’t notice any real difference performance-wise (edit: although the build script takes a lot longer to run than it used to – I’m working on that tomorrow), but do let me know here if there’s anything that’s broken.

Last edited by gaekwad (2019-10-10 18:27:05)

gaekwad · 2019-10-15 12:25:33

I’m pleased to report dev-demo is now running PHP 7.4 RC4.

PHP 7.4.0 GA is currently expected on or around November 26 2019.

Textpattern CMS

Textpattern CMS support forum

#121 2019-10-09 14:45:31

Re: Textpattern CMS demo site

#122 2019-10-10 04:48:53

Re: Textpattern CMS demo site

gaekwad wrote #319585:

#123 2019-10-10 10:32:35

Re: Textpattern CMS demo site

phiw13 wrote #319606:

#124 2019-10-10 11:31:31

Re: Textpattern CMS demo site

gaekwad wrote #319607:

#125 2019-10-10 11:33:15

Re: Textpattern CMS demo site

phiw13 wrote #319608:

#126 2019-10-10 11:36:08

Re: Textpattern CMS demo site

gaekwad wrote #319609:

#127 2019-10-10 11:40:21

Re: Textpattern CMS demo site

phiw13 wrote #319610:

#128 2019-10-10 11:54:18

Re: Textpattern CMS demo site

#129 2019-10-10 12:09:29

Re: Textpattern CMS demo site

phiw13 wrote #319614:

#130 2019-10-10 16:58:59

Re: Textpattern CMS demo site

#131 2019-10-10 18:25:39

Re: Textpattern CMS demo site

#132 2019-10-15 12:25:33

Re: Textpattern CMS demo site

Board footer