Git Product home page Git Product logo

playproject-io.github.io's Introduction

playproject-io.github.io's People

Contributors

ninabreznik avatar serapath avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar

Forkers

alyhxn

playproject-io.github.io's Issues

add custom domain

@todo

  • link on playproject.io for editor takes you to ethereum-play.github.io/editor-solidity
  • play.ethereum.org/editor-solidity, workshop-solidity etc. are not working
  • Website play.ethereum.org => playproject.io
  • make http and https work

package manager input field & related

@todo

  • specifytechnical infrastructure for settings/import/export mechanisms
  • describe usage scenarios in OS for package manager input field
  • make abstract UI/UX concept for how to show those in the app
    • derive/decide for all features
    • how to export/import/backup/add one or multiple links?
    • what about the supply tree of package manager regarding uninstallable packages?
      • should e.g. codingame or packman be listed?
      • is package manager the only software/package with that kind of extra dependencies?
      • if a user install 1000 packages, will the list of extra dependencies be 1000?
      • if a user installs an image gallery? and downloads 1000 pictures - will they show up like that?

about
import/export/copy/paste package manager addresses + settings

technical infrastructure

  • ...

usage scenarios

  • ...

UI/UX concept

  • ...

add social media preview (twitter, facebook, ...)

@todo


reading materials:

clickjacking protection misconfiguration

Just got this email

Hi team,

While performing security testing of your website i have found the vulnerability called Clickjacking.
Many URLS are in scope and vulnerable to Clickjacking.

What is Clickjacking ?
Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages.
The server didn't return an X-Frame-Options header which means that this website could be at risk of a clickjacking attack. The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page in a or <iframe>. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.
This vulnerability affects Web Server.

Steps to Reproduce / POC

Vulnerable Urls:https://playproject.io/
Put every above url one by one in the code of iframe, which is given below

<!DOCTYPE html>
<html>
<body>

<h1>The iframe element</h1>

<iframe src="https://playproject.io/">
  <p>Your browser does not support iframes.</p>
</iframe>

</body>
</html>

By hasan khan
hasankhan222424@gmail. Com

Notice that site is visible in the Iframe

POC is in the attachments. Thanks, waiting for your response.

Impact

Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they are typing in the password to their email or bank account, but are instead typing into an invisible frame controlled by the attacker
Screenshot_2020-05-18-11-31-59-452_com android chrome

website improvements

@todo

  • fix open pull request to resolve rebase merge conflict #10

@later

  • maybe make menu bar item texts a bit more visible?
    • also: add contact item to scroll to the bottom of the page
  • make project description texts a bit bigger/bolder and maybe color white
  • add social media icons to profiles and read links from profile json files
    • what about just contact: '...' or website: '...' instead of contact: { website, github, twitter}

roadmapping

@todo


@later


org-page concept & updates

@todo

  • link play.ethereum.org (update DNS) to github "playproject.io" static website
  • concept (wireframes?, style?, content?, sections?)
  • roadmap section
  • team section
  • about section
  • portfolio section
  • brainstorm about other sections
  • org-page#4: add social media preview (twitter, facebook, ...)
    • use it for all relevant link shareable pages in the playproject portfolio

Link http://play.ethereum.org/ to https://playproject-io.github.io/
see: https://github.com/ethereum/devops/issues/111

more resources

Create - theme_widget

Todo




Refactor - playproject

Todo


  • Update - playproject_v0.0.1
    • @input πŸ“¦ playproject_v0.0.1 from comment
    • Identifying and removing useless hard code in our_contributors.js
    • Research and find how to repeat the patterns
    • Change footer's year to dynamic current year
    • Add the new code and test
    • @output πŸ“¦ playproject_v0.0.2 from comment

  • Update - playproject_v0.0.2

  • Update - playproject_v0.0.3
    • @input πŸ“¦ playproject_v0.0.3 from comment
    • Mobile version for supporters and contributors section
    • Making sub-components' CSS independent of their supers
    • Shadow encapsulation of the components
    • Handling the logic change
    • Debugging
    • @output πŸ“¦ playproject_v0.0.4 from comment

Play brand book / design guide

@todo


collaborators photos

TODO

Update - Playproject Improvements

@todo

  • Update - Playproject Improvements


  • Design - big project island for a project called "data shell"
  • @input πŸ“¦ playproject.io

  • Design - a project island for the "task messenger app"
  • @input πŸ“¦ playproject.io


  • Design - a variety for team islands
  • @input πŸ“¦ playproject.io
  • sponsor islands are already different in style same thing for team island
  • @ouput πŸ“¦ team islands from comment

  • Update - add more animation effect for top main island
  • @input πŸ“¦ playproject.io
  • rotating windmills
  • animals moving around
  • a waterfall that animated where some drops drop from the island above onto the next.
  • if islands in general very subtly float and move up and down by themselves... like a boat on a sea with some calm waves


  • Design - logo for Task management app

Browser support list

@todo


Translation issue

@todo

  • Need to make a calculate function to fit the contents when loading the texts on the landing page
    • The different language is appearing different length with the characters.
    • Thus, every translation needs to calculate by individually.
  • add language parameter to the URL

e.g. https://playproject-io.github.io/?lang=<value> where <value> can be en or de or zh or zh-tw? ...etc...

const params = new URL(location.href).searchParams
const lang = params.get('lang')
console.log(lang) // e.g. => "en"

;(async filepath => {
  const json = await fetch(filepath).then(response => response.text())
  console.log(json)
})(new URL(`data.${lang}.json`, location.href).href)

// make english default
// => remove param if it's english

const params = new URL(location.href).searchParams
if (params.get('lang') === 'en') {
  params.delete('lang')
  location.search = params
}

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    πŸ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. πŸ“ŠπŸ“ˆπŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❀️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.