September 16, 2013 - Team Dysania

Captain's Log: 2013.09.16

• 46 Stars! Wow!

• Lots of eyes on us, and lots of work to do still
• Cleaned up and finished as many open v1.0.0 issues and open pull requests as we could in two hours
  • Learned how to checkout a branch submitted by another author, make edits and merge from the command line
  • A community-submitted onebox! woot. Peter Hellberg submitted a pull request for a Spotify Onebox, we made a few minor changes and merged
  • Grammar fix pull request submitted by Kevin Menard
  • Changed GitHub Commit Onebox to use Nokogiri instead of OpenGraph, as OpenGraph object didn't include as many details as we would like to preview
  • Renamed all of our engine specs to include "_onebox" in the name for convention's sake
  • Declined a contribution for syntax edits
• Still so much more work to do!
• HOMEWORK: Keep on making oneboxes for v1.1.0

link

September 12, 2013 - Team Dysania

RELEASE THE KRAKEN

We've officially released Onebox 1.0.0!

Check our gem out on RubyGems.org:

This is our onebox in action:

Pretty, right? :stuck_out_tongue_closed_eyes:

link

September 09, 2013 - JZ

Captain's Log: 2013.09.09

• I went solo tonight since Vyki had to take the night off
• Sick with fever/cold! But must keep going...
• Captain Kurt gave me some pair programming interview tips
• Finally merged caching-support-for-preview into master, 3 weeks after opening the PR
• Created sanitize-url-for-preview branch
  • We need to make sure oneboxes don't allow cross-site scripting, aka XSS
  • Added tests to Engine spec
    • Returns onebox wrapper
    • Doesn't allow XSS injection
  • Added tests to Onebox spec
    • No triple braces in Handlebars templates - this escapes values
    • No Javascript - <script tags or attributes like onclick, onload, etc.
  • Fixed Wikipedia onebox template to not use triple braces
  • Ready for Vyki to merge
• We're now ready for 1.0.0 release! Now to do it together...

link