darrenofficial / dpaste Goto Github PK

Auto delete the snippet once it was viewed by another one (after the second view, the first one is by the author, who shares the link, which gets a view, which deletes the snippet)

The snippet was already deleted when the button is visible.

There should be a one button click to remove all recent pastes that appear in the history page.

Many users will paste one language much more than any other; allowing them to set a default would be helpful.

Thanks for all the work and time you've put into dpaste!
Are there any plans to tag a release stamp on what you're having right here? ;)

I've no experience with django, but I'd like to install & run dpaste.

I can clone the repo fine, or install dpaste from pip, but I'm then stumped. I do not know how to run it, and there is nothing in the documents to tell me how.

I'm aware that this is probably due to the fact that I know nothng about djang, but it'd be nice if the docs had something about running dpaste from scratch.

Thanks

1. Hi, is there a way to specify the language of the pasted text via API?
2. Is there a way to set the language of a existing paste when viewing?
3. Is there a way of specified the desired langue using a url parameter?

Thanks!

It would be nice to be able to direct someone to a URL such as

https://dpaste.de/?lexer=C

(or the equivalent JS-based hash parameter if implemented in the client) in order to nudge things in the right direction when recommending dpaste within a given project or community.

Issue #58

I am not a Mac user and feel discriminated against due to the fact that the submit key combination is cmd+enter ;D
It would be nice if I could submit a paste using CTRL+Enter or ALT+Enter on Linux/WIndows systems.

Raw views of pastes may cause Cross-SIte-Scripting (XSS) in Internet Explorer, since IE likes to guess content types for those that Microsoft calls ambigous (i.e., text/plain, application/octet-stream).

To counter this, dpaste could send a X-Content-Type-Options header with the value nosniff

The dpaste pypi sdist currently doesn't contain templates and static files, and when using repository sources, templates and static files are not installed.

Currently the setup.py specifies:

package_data={'dpaste': ['static/*.*', 'templates/*.*']},

which only matches non-recursively, and only files not directories.

Create a MANIFEST.in with the following contents:

include *.rst LICENSE
recursive-include dpaste/templates *
recursive-include dpaste/static *

And add the following to setup.py:

include_package_data=True,

You may (should) also add LICENSE, README.rst to this manifest, and any other files you'd like to include in the sdist.

References:

https://docs.djangoproject.com/en/dev/intro/reusable-apps/#packaging-your-app
http://docs.python.org/2/distutils/sourcedist.html#commands
http://blog.nyaruka.com/adding-a-django-app-to-pythons-cheese-shop-py

They should be 1-based, slightly confusing.

Currently the dpaste setup.py contains:

scripts=('manage.py',),

This unnecessarily adds the file to LOCALBASE/bin when it is only required at the Django project level.

If this is to assist users in "standalone" mode, can I suggest removing the line from setup.py, and instead creating a project_template directory that people can point to & use when running django-admin

It would be really nice if there was a way (at least optional to the person deploying it) to make pastes stay valid forever

I'm trying to submit a long JSON snippet (250460 bytes) and for some reason, with an out-of-the-box installation, only 40750 bytes are retained.

I tried to override DPASTE_MAX_CONTENT_LENGTH to make sure the doc wasn't desync from the code:

DPASTE_MAX_CONTENT_LENGTH = 1024 * 1024 * 100

But it doesn't work. I see on https://dpaste.de that submitting the same JSON snippet is working perfectly.

My setup is really simple:

• I use nginx as a reverse proxy
• The default client_max_body_size on nginx is 1MB so it doesn't seem to be the problem
• Dpaste django project is started on a screen session with manage.py runserver

You have DEBUG set to True on the live site.

I just wanted to let you know.

Guessing the language automatically would be a very appreciated feature.
HighlightJS seems to provide support for this.

The wording of the about page is specific to the particular dpaste.de implementation of this project. Would it be interesting to make this page more generic so that it fits in any implementation? If so, I'd be more than happy to write the text for that.

Just a thought - no worries either way. 😄

1. Go to dpaste.de
2. Type something like this in the box

if language == 'python:'
    print "leading whitespace matters a lot"
print "right?"

1. click the 'Paste' button

Observe the result:

Expected result: leading whitespace is preserved.

"Guess lexer" Button didn't work when I tried it with some python code.

• http://dpaste.org
• https://dpaste.org (invalid, certificate for www.dpaste.de)
• http://www.dpaste.org
• https://www.dpaste.org (invalid, certificate for www.dpaste.de)
• http://dpaste.de
• https://dpaste.de (valid, certificate for dpaste.de)
• http://www.dpaste.de
• https://www.dpaste.de (valid, certificate for www.dpaste.de)

Right now there is no redirect from any to any of these. 2 have an invalid certificate. 4 have broken javascript (#15).

I'd recommend picking a non-www HTTPS domain as the canonical one. And redirect everything else to that (or at least specify <link rel=canonical>).

The easiest choice would be https://dpaste.de since that one has a valid SSL certificate. If dpaste.org is simply a redirect, it is OK not to have an HTTPS version I guess.

Though certificates aside, I personally prefer dpaste.org over dpaste.de (since it isn't Germany specific and org seems cool for FOSS utilities). Perhaps you could get an SSL certificate on dpaste.org/www.dpaste.org like you got for dpaste.de/www.depaste.de and use https://dpaste.org as primary.

Additionally fix the SESSION_COOKIE_DOMAIN cause right now we use separate cookies for [www.]?

It would be cool if I could delete snippets from the histroy view and/or delete all snippets at once.

See f7e9544

Utilise test_suite and tests_require in setup.py to enable running unit tests via python setup.py test

You can either hook it into your existing run_tests.py, or point it to the nose collector. I've included references for doing either below.

References:

https://nose.readthedocs.org/en/latest/setuptools_integration.html
http://pythonhosted.org/setuptools/setuptools.html#test
http://pytest.org/latest/goodpractises.html#integrating-with-distutils-python-setup-py-test

A way to choose the syntax by passing the associated file extension would be great.
Example: https:// dpaste.de/api/py

http://dpaste.de/about/

The classifiers specified in the dpaste setup.py dont seem to be reflected in the dpaste pypi entry: https://pypi.python.org/pypi/dpaste

classifiers=(
    'Development Status :: 5 - Production/Stable',
    'Environment :: Web Environment',
    'Intended Audience :: Developers',
    'License :: OSI Approved :: MIT License',
    'Operating System :: OS Independent',
    'Programming Language :: Python',
    'Framework :: Django',
),

I think this may be related to using a list not a tuple as per:

http://docs.python.org/2/distutils/setupscript.html#additional-meta-data
http://docs.python.org/3.3/distutils/apiref.html#distutils.core.setup

Thanks to SilentGhost @ #python FreeNode for this

Speaks for itself :)

Sometimes people add snippets via the API and they can't simply delete them. Add a form to let them delete any snippet by submitting the slug. They can delete any snippet, even foreign ones, but thats fine.

The twitter button contains the current URL and therefore tracks users.
All pastes that you create are potentially visible to a third party.

Is there a way to remove this button from the settings?

I don't think this is a serious issue - I mean...for a nopaste service, but still. Why did you disable CSRF protection?
Probably to put things into dpaste via curl and other APIs?

It would be great to at least have it for snippet_delete ;)

I'm getting the error TypeError: can't use a string pattern on a bytes-like object when I'm trying to create a Gist.

I believe this is the problem: https://github.com/bartTC/dpaste/blob/master/dpaste/views.py#L224.

I'm using python 3.

The random number generator used to generate secret IDs is deterministic
This means that given an certain amount of secret IDs (by generating a few empty snippets) it is possible to generate previous and future IDs.

To support a greater deal of secrecy, you could generate >4 random bytes using os.urandom and encode them to your current output alphabet. This can be easily done with Base36:

bytes = os.urandom(5)
secret_id = base36_encode(bytes)

From #50

Typically, the DPASTE_MAX_SNIPPETS_PER_USER had two different values in the codebase (10 and 15).

Suggestion API Update

As discussed by mail I open a ticket hereby. I`m not a good python coder so I hope somebody or you find some time to add those changes.

Problem

Currently the API is limited to receive CONTENT as only POST data. I`m using sublime to code a lot in PHP + JS and also some other languages. The Problem is that there is currently no way to let a sublime plugin pass the currently used lexer to dpaste or choose the time of store.

Solution

Adding the acceptance of LEXER + STORETIME to the POST API would solve this problem.

Sublime Text Plugin

A simple change to the official sublime dpaste plugin could be used to submit the right lexer:

def paste_code(self,content):
    values = {
        'content' : content,
        'lexer' : get_language(self)
    }
    request = urllib2.Request(
        'http://dpaste.de/api/',
        urllib.urlencode(values),
    )

And the called function:

def get_language(self):
    return self.view.settings().get("syntax").split('/')[-1].split('.')[0]

Thank's alot.

I like that dpaste has a properly set up HTTPS domain (valid certificate, all urls relative so you stay on HTTPS etc.)

However one problem. jQuery is loaded from a fixed HTTP url (http://code.jquery.com/jquery.js) which is blocked by modern browsers over HTTPS.

Perhaps host is locally or load it from a CDN that does support HTTPS (such as Google APIs):

<script src="//ajax.googleapis.com/ajax/libs/jquery/1/jquery.js"></script>

By using protocol-relative urls it'll load it from http or https based on the current request.

Add an entry for views.snipped_diff to the urls.py like /diff/$pasteid1/$pasteid2/ and add a link to this url when selecting "compare"

Had to upgrade Piston due a bug with external requests and now we have a bug with the handling of missing data. All 'empty' tests fail due to https://bitbucket.org/jespern/django-piston/issue/221/attributeerror-httpresponseservererror

We should remove Piston completely in favor of a simple view.

Is there any recommended way to use custom template for the app?

Document how to integrate dpaste into an existing project structure.

http://blogs.sitepointstatic.com/examples/tech/textarea-expander/index.html