kaitai-io / kaitai-io.github.io Goto Github PK

Using Kaitai Struct in a program requires additional downloads beyond what's available from clicking the "download" link, but this is not made clear, and there are no obvious links to them.

Steps to reproduce:

1. Click the "download" link.
2. Download and install the "universal .zip" package or the "Linux .deb" package (or, presumably, the Windows MSI installer).
3. Use the Kaitai Struct compiler to generate code.

Expected result:

You now have everything you need to use Kaitai Struct in your program.

Actual result:

You still need to download the appropriate runtime. If there are any download links for the runtimes on the site, I've been unable to find them.

I didn't even realise there was a /news folder until I clicked on the 0.9 announcement and hand-manipulated the URL! I think it would be good to have a link to the news index in the top menu.

As a secondary request it would be nice to pretty up the news index, e.g. adding extracts of each post, dates etc. And an RSS feed.

Hi,

The OWASP ZAP project is now using Kaitai Struct to parse macOS .DS_Store files following my contributions to both projects (kaitai-io/kaitai_struct_formats#131 and zaproxy/zaproxy#30).

I think OWASP ZAP can be added to the "Built with Kaitai Struct" section of Kaitai Struct's website. I can create a PR if needed.

Thanks.

1 Remove bootstrap. I have tried to make the tabs work without JavaScript without too much sodomy (which will never be accepted because it makes code dirty) and failed. Current layout

<ul class="nav nav-pills" role="tablist">
                <li role="presentation" class="active"><a href="#download-linux-deb" role="tab" data-toggle="tab">Linux .deb</a></li>
                <li role="presentation"><a href="#download-windows" role="tab" data-toggle="tab">Windows</a></li>
                <li role="presentation"><a href="#download-universal" role="tab" data-toggle="tab">Universal .zip</a></li>
                <li role="presentation"><a href="#download-source" role="tab" data-toggle="tab">Source</a></li>
            </ul>
<div class="tab-content" style="margin-top: 20px; min-height: 300px">
                <div role="tabpanel" class="tab-pane active" id="download-linux-deb">
                    ...
                </div>
                ....
</div>

disallows that dirty hacks used for css tabs (a label in tab a tab header and a radio and checked pseudoclass and some selectors. The problem here is that css selectors disallow to select parents so we can't style both tabs headers and tabs bodies in this layout without too much sodomy such as making 2 radios per tab: one is for header, one is for body). Because this layout is dictated by bootstrap I guess we should eliminate bootstrap-based tabs and implement css tabs instead.
2 We should eliminate all third-party resources because they can be changed to malicious ones any time and because accesses to them leak info to third parties. In fact I think the true goal of spending money for providing these resources in CDN for free for every webdev is to collect leaked information from the whole internet of lemmings. I think we should make a local (gh-pages) copy of them and link it instead of cdnjs and google fonts. For binary resources we should use git lfs which was created to solve problems git has with binaries.
3 When I go to github's URI for kaitai.io it redirects me to main domain. But that domain lacks https because github is actually used and gh cert has gh dns in it. I don't think it is good to load executable code (javascript) via insecure channel.