Please allow poupeegirl users on DW to use poupeegirl blog widgets

[cleverthylacine]

Title:
Please allow poupeegirl users on DW to use poupeegirl blog widgets

Area:
Embedding

Summary:
Poupeegirl users are able to get ribbons (site points) as referral bonuses if people sign on to or join Poupeegirl through blog widgets. They don't work on DW and I wish they did.

Description:
I understand that certain embeds are whitelisted and allowed on DW such as youtube, even though javascript and flash are generally not allowed. I am an avid user of Poupeegirl and would like it if Poupeegirl blog widgets were whitelisted so that I could use them on DW and do the following things:

* Display my Poupeegirl snapshot on my DW journal
* Allow people to access Poupeegirl through the blog widget so that I can get ribbons (site points).

The Poupeegirl blog widgets can be found here:

http://pupe.ameba.jp/cute/tool/blogparts

I would really like to be able to use them; I bow to your superior expertise, but they look pretty harmless to me. I don't see any real drawbacks other than the time it would take to add them to the whitelist, since the code is pretty limited.

Thanks!

Poll #1398 Please allow poupeegirl users on DW to use poupeegirl blog widgets

Open to: Registered Users, detailed results viewable to: All, participants: 35

View Respondents

This suggestion:

View Answers

Should be implemented as-is.
2 (5.7%)

Should be implemented with changes. (please comment)
2 (5.7%)

Shouldn't be implemented.
11 (31.4%)

(I have no opinion)
20 (57.1%)

(Other: please comment)
0 (0.0%)

Comments

[lore]

I answered NO because LJ just went through a security breach because it allowed widgets from a site called LJ-Toys. Maybe you should offer a new suggestion about updating the software(or check it) so off-site widgets would be secure to use. It's a broader suggestion that would lead to making your widgets allowed and safe.

love, lore

[yvi]

I answered NO because LJ just went through a security breach because it allowed widgets from a site called LJ-Toys.

That wasn't the reason. ljtoys is a site Livejournal internally uses to embed content. It has nothing to do with http://ljtoys.org.uk/ , which is what people use in their modd icons (?) to gather statistics.

[lore]

Mood icons gather statistics??

Ok...I'm still a NO now because of the comments below, which seem like good ideas. But thanks for the enlightenment!

love, lore

[yvi]

Yeah, it's this thing http://ljtoys.org.uk/wiki/index.php/Readers_Monitor The LJToys Readers monitor works by embedding little images in your journal and tracking computers that load them.

[cleverthylacine]

...is there some reason you are signing your comments as though we knew each other personally? Do we know each other under other names from IRC or somewhere?

Otherwise, lovebombing me after you tell me that you are voting against my suggestion (for reasons that have little to do with it, no less) is going to continue to give me flashbacks to dealing with my mother 20 years ago, which will not help me discuss this rationally and professionally with you.

I have nothing to do with pupe.ameba.jp 's site or security designs--they're not my widgets, they're widgets I would like to be able to use. I'm also pretty sure that D and Mark have already checked our code to make sure that what happened on LJ will not happen here.

[sofiaviolet]

I assume DW can come up with a less ridiculous cross-site flash policy than LJ's policy (pre-exploit), which would make whitelisting various embeds safe enough.

"With changes" refers mainly to the thought that Suggestions might not be the best place for getting off-site widgets approved. I can see it becoming kind of spammy. We might want to brainstorm a different way of submitting widgets for approval.

[cleverthylacine]

That sounds reasonable.

[sky]

I don't use Poupeegirl, but there are certainly some other widgets I wish worked on DW, especially Twitter's and my Delicious feed...

[msilverstar]

Delicious is a big deal, and I would so like to use their update widget. +1!

[cleverthylacine]

Yeah. I would also honestly like to use my ebay widget.