• Nato Boram@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Hi! I noticed an issue with the headers sent by Lemmy.world.

    Headers sent from and to this website’s official UI look like this:

    HTTP/1.1 200 OK
    server: nginx/1.18.0 (Ubuntu)
    date: Fri, 07 Jul 2023 23:35:17 GMT
    content-type: application/json
    vary: accept-encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
    content-encoding: gzip
    access-control-allow-origin: *
    access-control-allow-methods: GET, POST, PUT, OPTIONS
    access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
    access-control-expose-headers: content-encoding, content-type, vary, Content-Length,Content-Range
    X-Firefox-Spdy: h2
    

    Which is fine. However, headers received by custom clients look like this:

    HTTP/2 200 OK
    server: nginx/1.18.0 (Ubuntu)
    date: Fri, 07 Jul 2023 23:33:50 GMT
    content-type: application/json
    vary: accept-encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers
    content-encoding: gzip
    access-control-allow-origin: https://natoboram.github.io
    access-control-expose-headers: content-encoding, access-control-allow-origin, content-type, vary
    access-control-allow-origin: *
    access-control-allow-methods: GET, POST, PUT, OPTIONS
    access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
    access-control-expose-headers: Content-Length,Content-Range
    X-Firefox-Spdy: h2
    

    There’s two access-control-allow-origin! This still breaks web clients.

  • DarthBueller@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Where can I learn about transferring my community to another instance? Lemmy.worlds silence about threads means he has no intent to defederate so I need to move over to lemmy.ml.

    Or is this not possible? Do I just need to walk away from my community because @ruud doesn’t care about the issue?

    If that’s the case, how do I add a mod that doesn’t care about meta expressly stating they are going to add features to ActivityPub protocol (step two of EEE)? I don’t want to keep coming back here if it is federated with threads but I don’t need to leave whoever is staying here high and dry.

  • owatnext@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Thanks for the update! But I noticed an issue: it seems you haven’t commented on defederating from Threads? Please let us know if you are so we can respond accordingly.

    • rowdy@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      The same admins run a Mastodon instance. They are taking a “wait and see” approach on Mastodon. Their lack of statement on their Lemmy instance leads me to believe they will be taking the same approach.

      This doesn’t work for me - I joined Lemmy to be as far from big tech as possible. Time to exercise the power of the fediverse and move to an instance that admins in a way I prefer!

      • lenninscjay@lemm.ee
        link
        fedilink
        arrow-up
        0
        ·
        1 year ago

        Yup, hence why I’m on lemm.ee. Originally made an instance to cover when .world was being slow but I think this will be my main now. They haven’t finalized the vote but it seems to be going the defed route.

        Still hugely supportive of the .world admins though. They’ve done a ton of work to keep .world running and a ton of digging that will help lemmy overall. I just don’t agree with federating with big social media.