Cut-and-paste from CodiMD

[ietf-svn-bot]

type_defect | by henrik@levkowetz.com

---

It would be useful to be able to cut-n-paste minutes from CodiMD, but currently the HTML sanitization makes the results unsatisfactory. From francesca.palombini@ericsson.com:

I was trying to upload my minutes in the HTML version that codimd creates. The problem is when I upload them I get the following message from the datatracker:

"Uploaded html content is sanitized to prevent unsafe content. Your upload minutes-108-cbor-00.html was changed by the sanitization; please check the resulting content."

And when I open the minutes the table of content seems to appear on top of the minutes and make them unreadable. (see: https://www.ietf.org/proceedings/108/minutes/minutes-108-cbor-00.html )

I could use the Raw HTML minutes from the codimd, but if possible I'd like to keep the nice look of the HTML. I tried to see if I could remove the table of content from codimd but could not find a way.

---

Issue migrated from trac:3046 at 2022-03-04 07:57:05 +0000

[ietf-svn-bot]

@henrik@levkowetz.com edited the issue description

[ietf-svn-bot]

@rjsparks@nostrum.com commented

---

It might also be nice to have the minutes upload form just accept a link to fetch HTML from instead of having to go through a download/upload step.

[ietf-svn-bot]

@rjsparks@nostrum.com changed status from new to accepted

[ietf-svn-bot]

@rjsparks@nostrum.com commented

---

There are several larger things to work through here:

• The pages from codimd currently get many things (fonts/stylesheets) from a cdn. Changes at those external placess would affect how (and even whether) content would render for us. That's a problem for content intended to go into meeting proceedings. The scrubbing step will need to make sure the document being uploaded is self-contained. Additionally, we could work with the codimd community to get them to make an exporter that produces self-contained results so that the scrubber would have less to do.

• The way we show material on the agenda pop-up dialogs needs improvement. The mechanism currently in use imports the uploaded html directly into the dom of the agenda page. Styling that comes with that content (or even broken html in that content) will affect the rest of the page. Things like anchor names in the imported content become shared through the whole agenda document. We should investigate trying to use iframes again, or perhaps not inline such hmtl things, but provide links, or maybe an even more aggressively sanitized preview.

For the short term, I suggest uploading the markdown. It's less pretty, but we have the option in the future of rendering it however we want. where as taking the raw html, for instance, sticks us to that particular html rendering.

[ietf-svn-bot]

@rjsparks@nostrum.com changed _comment0 which not transferred by tractive

[chrysn]

This appears to be resolved in the latest data tracker release; there is an "import from notes.ietf.org" / "import preview" step now.

It has some remaining problems, but they're probably better handled in a separate issue.

[rjsparks]

Closing as OBE