<asheesh>
This SandForms git repository is pretty fun to watch.
<asheesh>
maurer: FWIW re: sub-paths: This ends up creating a burden on app authors.
<asheesh>
If you imagine a non-from-scratch Sandstorm app, how would we tell it what that sub-path is? What if it forgets to prefix some URL with it - should we "do what I mean" and fix it for it? If so, that removes the protection.
<asheesh>
So I think it's a bit error-prone to use sub-paths, as much as I love them.
Guest59536 has quit [Quit: WeeChat 1.3]
<asheesh>
Curious for your take.
heliostatic has quit [Ping timeout: 256 seconds]
nwf_ has joined #sandstorm
<maurer>
asheesh: So, amusingly, I was considering doing this to decrease app author burden
<maurer>
asheesh: It'd probably increase port burden
<maurer>
but author burden would probs go down
<maurer>
since you wouldn't have to csrf everything
fkautz has joined #sandstorm
<maurer>
asheesh: I also don't really know too much about the error prone nature since most of my webdev is in Yesod
<maurer>
so most of the subdirectory stuff can be coded into the app directly and then the different subpages referenced w/o thought about the url
mnutt has joined #sandstorm
heliostatic has joined #sandstorm
<asheesh>
Ya; I think that for fresh apps, doing what you suggest would be glorious. You could also imagine using the X-Sandstorm-Session-Id as your prefix, which I think is safe, but haven't double-checked.
<dwrensha>
X-Sandstorm-Session-Id right now is an integer counter
|jemc| has quit [Quit: WeeChat 1.2]
|jemc| has joined #sandstorm
mnutt has quit [Quit: mnutt]
dwrensha has quit [Quit: ChatZilla 0.9.92 [Firefox 43.0.2/20151221130713]]
mnutt has joined #sandstorm
mnutt has quit [Quit: mnutt]
heliostatic has quit [Ping timeout: 256 seconds]
ArcTanSusan has quit [Quit: ArcTanSusan]
mnutt has joined #sandstorm
heliostatic has joined #sandstorm
ArcTanSusan has joined #sandstorm
<asheesh>
maurer: Then my above plan won't work (-:
<zarvox>
Qwertie: with the exception of the /usr/local/bin/sandstorm and /usr/local/bin/spk symlinks, and the /etc/systemd/system/sandstorm.service unit (which will both be overwritten on a reinstall), Sandstorm keeps everything entirely under /opt/sandstorm
mnutt has quit [Quit: mnutt]
mnutt has joined #sandstorm
heliostatic has quit [Ping timeout: 256 seconds]
mnutt has quit [Quit: mnutt]
dlitz has quit [Quit: Quitting]
heliostatic has joined #sandstorm
dlitz has joined #sandstorm
dlitz has quit [Client Quit]
heliostatic has quit [Ping timeout: 245 seconds]
dlitz has joined #sandstorm
heliostatic has joined #sandstorm
oao has quit [Ping timeout: 240 seconds]
jjb has joined #sandstorm
jjb is now known as oao
decipherstatic has quit [Remote host closed the connection]