interesting - may I ask what you replace the placeholder with? since you only mention png and the content type is actually part of the shortcode you only allow specific placeholders - right? and it’s probably replaced with an image tag that links to the image via dweb/anttp (or you inject the whole image as base64 encoded string?)
does it discriminate between script/html section of a site? may there be hidden shortcodes in the script section injecting javascript?
1 Like
So in the case of an image, I replace with the image. This works pretty much everywhere I’ve tried.
If it’s a video I replace with the video - currently this works fine on most sites, but some like github have CSP restriction for video so I am going to implement a system where it tries to show it and if not will show a link which opens the video in a video viewer page via the extension.
If it’s a PDF it won’t show because of CSP. This is from the browser itself, so I instead show a link to open the PDF in the viewer.
Haven’t tried mp3 yet but will find out tomorrow.
It scans down through all the text nodes in the body of the page. I’m not sure what you mean about hidden shortcodes in the script section, what would be the benefit to this?
I inject the encoded string that it gets from the websocket to either endpoint server or the local client - whatever the user mode is set to.
ah right - I somehow wasn’t aware it’s possible to put a script tag everywhere on the site xD
i was thinking about the possibility to inject a whole JS webcomponent
<my-comp></my-comp>
<script>
customElements.define('my-comp', class extends HTMLElement {
connectedCallback() {
alert("XSS via WebComponent");
}
});
</script>
e.g. a mini game into a forum post xD / social media post … but would require to insert “raw content” I guess and not a specific object type
…and I’m really not sure we should do this due to security stuff … even though it would be cool xD …
1 Like
The content injection script is a .js file so I’m sure it could just inject whatever you want. The issue is if the browser and domain allows it to be rendered. Trial and error 
3 Likes
Shows links to viewer component for shortcodes if content is blocked by websites or browser (CSP).
5 Likes
New release with latest version of anttp
People running endpoint servers should also regenerate their docker containers (see documentation) to get the latest version.
7 Likes
New release to have latest versions of anttp, dweb and ant.
Currently in process of building the browser - which will not use sidecar binaries. This will get rid of popups regarding security of each individual binary.
9 Likes
Now on the endpoints servers you can now check the version of anttp by looking at the return headers for the server property.
server: anttp/0.11.0
I will add functionality when we have a few more endpoints, that will prioritize the latest versions first. (unless overridden by user)
5 Likes
Thanks. I’ve updated the client on Windows.
Unfortunately nothing seems to be loading on my Windows installation. (Edit: it’s working now; I may have not pressed the ‘start server’ button. Either that or restarting my computer sorted it.)
One suggestion I have is that it’d be good to have a few correctly formatted example sites for people to explore in the first post of this thread to assist with testing / getting started / exploring. It’s great having the extension, but how to find sites to open?
Great work on this 
2 Likes
In your extension, are you on local mode?
Also what are you typing in for the anttp input? Can you paste:
385247a88c16db8277e649be549562cf17cbfd1e6fa36c6bddd42f277c527383/reefer/Reefer_madness1938.webm
And see if that loads the video?
The url in the address bar should be:
another good one to try on anttp would be:
gindex
dweb works for me typing in ‘awesome’, but it is slower to load than anttp.
Can you also confirm what versions of the local client and of the extension you are using?
The version for the extension can be found in the settings page, and the version for the local client isn’t actually on the client yet, but you can just click the show version of anttp button and to see if it’s the latest (0.11.0)
3 Likes
Ah good to hear!
2 Likes
Thanks, that video worked.
Unfortunately some other things didn’t go so well.
Atlas worked in dweb, though I think it’s just old content from a previous visit. It says it failed to initialise & I can’t see any recent shouts (latest is from 5 days ago).
gindex doesn’t work for me. Just says:
File not found “127.0.0.1:18888”
I tried ‘index’, which came up with a page of links, but then anything I clicked on that page didn’t load.
http://imim/blog/ says site can’t be reached after following the link from ‘index’.
The extension says version 0.1.4, but I downloaded & installed version 0.1.5, so I expect the version number is incorrect.
The dweb version says 0.10.9, though it’s also the latest version (0.1.6), so I think it should be dweb 0.11?
I’ll have another go tomorrow to see if I can get it working.
2 Likes
Correct the version number in the extension needs to be updated.
When I type ‘gindex’ into the anttp field and click ‘browse anttp’ it opens fine. Weird that it’s not working for you. You don’t have anttp running locally independent of the local client right?
I think his blog is now (with a g):
1 Like
If you navigate to http://127.0.0.1:18888/gindex you should see a list of pages to click on (including my blog).
If the above isn’t working, you could try adding a trailing slash (which maybe causing some bother somewhere?): http://127.0.0.1:18888/gindex/
2 Likes
This is because dweb provides all versions of the site, but can’t yet rely on Pointers to go directly to the most recent.
4 Likes
I’m pretty close to having anttp working as a library inside a custom rust browser. Currently adding custom video support so that videos can be streamed in a nice way. Next will be other media types and then onto normal html rendering.
Tauri uses webkit for mac/linux so I’m assuming some funny business when trying to play with iframes. But let’s see.
8 Likes
Unfortunately none of this is working for me. I reinstalled the app and extension last night, tried rebooting etc, but can’t load anything new, except for this video:
…perhaps it’s locally cached?
I’m using Brave browser, in case it makes any difference.
Not to worry. I’ll try again when there’s a new release
3 Likes
adding tabs now.Amazing!
Might it be possible have a few default ‘bookmarks’ or something so that anyone opening up the browser has some options to view something without needing to scour the forum for URLs?
Very much looking forward to trying this out
2 Likes
Are you making a stand alone browser now ?
Or is that the browser plugin ?
2 Likes