Is there a Lemmy server/way that doesn't require allowing javascript of a million other servers?
-
So, I am one of those old school types who mains with Firefox and Noscript. And also a filthy casual that just goes on lemmy.world. But half the images are broken because I'm expected to allow scripts on like 30+ sites to see most of the posts. I'm literally expected to allow /all/ the scripts from a domain just so I can see a dang picture behind the thumbnail. That's the entirety of the scripting needed. That seems ridiculous. Is there, I don't know, a server/way that makes it so I don't have to blanket allow all these scripts? To put it in meme form (not sure I'm doing it right, never seen the show): "It's an image of a banana Michael, what should it take, one Raspberry Pi running Docker?"
Look for a desktop app.
-
Absolutely. The vast majority of my sites do just fine when whitelisting only the primary domain. I consider it an essential add-on myself.
Lemmy is one of the few that needs a little babysitting, and it's only for the purpose OP stated.
Good to know...
Is it a pleasant experience? -
Yes, you can.
Yes, I did
-
Yes.
PieFed uses very minimal javascript (it 95% works with JS entirely disabled) and you can access all the same communities and posts.
Try it at https://piefed.social or any of these other instances - https://join.piefed.social/try
Just curious, what's the 5% that doesn't work with JS disabled?
-
Just curious, what's the 5% that doesn't work with JS disabled?
Voting, lol. Kinda important.
Dropdown menus. They're not really needed but life sucks without them.
Can't manually switch between dark and light mode (only automatically based on browser settings).
There's probably more but I haven't seriously tried to use PieFed for long without JS. Fundamentally it's built HTML and CSS first, with sprinkles of JS added on for funsies rather than the modern way of being all about JS.
-
Look for a desktop app.
I don't think any exist
-
Voting, lol. Kinda important.
Dropdown menus. They're not really needed but life sucks without them.
Can't manually switch between dark and light mode (only automatically based on browser settings).
There's probably more but I haven't seriously tried to use PieFed for long without JS. Fundamentally it's built HTML and CSS first, with sprinkles of JS added on for funsies rather than the modern way of being all about JS.
Yesterday:
<nav script="dropdown.js" style="dropdown.css"> <button onclick="toggleDropdown()">Menu</button> </nav>Today:
// index.js import React from 'react'; import ReactDOM from 'react-dom'; import './global.css'; import App from './App'; ReactDOM.createRoot(document.getElementById('root')).render(<App />); // App.jsx import Dropdown from './components/Dropdown'; import './App.css'; export default function App() { return ( <main> <Dropdown /> <p>Hello, world!</p> </main> ); } // components/Dropdown.jsx import { useState } from 'react'; import styles from './Dropdown.module.css'; import ArrowIcon from '../assets/icons/ArrowIcon.jsx'; export default function Dropdown() { const [open, setOpen] = useState(false); return ( <div className={styles.dropdown}> <button onClick={() => setOpen(!open)}>Menu <ArrowIcon /></button> {open && ( <ul> <li>Option 1</li> <li>Option 2</li> </ul> )} </div> ); } -
Unfortunately with Lemmy 1.0 MLMYM (the software used to provide this UI) will have to be shutdown, unless the MLMYM dev re-appears or someone forks and maintains it.
-
I don't think any exist
There is Interstellar!
-
I use the https://vger.app/ app / front end on mobile AND desktop and as far as I can tell it tunnels the images through their servers, so this is as minimal as you can get in regards to extra requests.
Some instances host this themselves too.
Voyager for Lemmy
Voyager is a beautiful mobile web client for Lemmy. Enjoy a seamless experience browsing the fediverse.
(app.thelemmy.club)
-
I don't think any exist
Blorp has a desktop app.
-
Yesterday:
<nav script="dropdown.js" style="dropdown.css"> <button onclick="toggleDropdown()">Menu</button> </nav>Today:
// index.js import React from 'react'; import ReactDOM from 'react-dom'; import './global.css'; import App from './App'; ReactDOM.createRoot(document.getElementById('root')).render(<App />); // App.jsx import Dropdown from './components/Dropdown'; import './App.css'; export default function App() { return ( <main> <Dropdown /> <p>Hello, world!</p> </main> ); } // components/Dropdown.jsx import { useState } from 'react'; import styles from './Dropdown.module.css'; import ArrowIcon from '../assets/icons/ArrowIcon.jsx'; export default function Dropdown() { const [open, setOpen] = useState(false); return ( <div className={styles.dropdown}> <button onClick={() => setOpen(!open)}>Menu <ArrowIcon /></button> {open && ( <ul> <li>Option 1</li> <li>Option 2</li> </ul> )} </div> ); } -
Blorp has a desktop app.
Is it electron? I can't seem to find it outside of Mac, iOS and a test for Android
-
That way is old and busted, here's the new hotness (anchor positioning).
-
Unfortunately with Lemmy 1.0 MLMYM (the software used to provide this UI) will have to be shutdown, unless the MLMYM dev re-appears or someone forks and maintains it.
Hopefully someone will volunteer to make compatible with Lemmy 1.0
-
So, I am one of those old school types who mains with Firefox and Noscript. And also a filthy casual that just goes on lemmy.world. But half the images are broken because I'm expected to allow scripts on like 30+ sites to see most of the posts. I'm literally expected to allow /all/ the scripts from a domain just so I can see a dang picture behind the thumbnail. That's the entirety of the scripting needed. That seems ridiculous. Is there, I don't know, a server/way that makes it so I don't have to blanket allow all these scripts? To put it in meme form (not sure I'm doing it right, never seen the show): "It's an image of a banana Michael, what should it take, one Raspberry Pi running Docker?"
This tbh.
I don't understand why is this not he standard for Lemmy and the Fediverse. We got here, among other things, to get away from the kind of crap enabled by JS-first web.
-
So, I am one of those old school types who mains with Firefox and Noscript. And also a filthy casual that just goes on lemmy.world. But half the images are broken because I'm expected to allow scripts on like 30+ sites to see most of the posts. I'm literally expected to allow /all/ the scripts from a domain just so I can see a dang picture behind the thumbnail. That's the entirety of the scripting needed. That seems ridiculous. Is there, I don't know, a server/way that makes it so I don't have to blanket allow all these scripts? To put it in meme form (not sure I'm doing it right, never seen the show): "It's an image of a banana Michael, what should it take, one Raspberry Pi running Docker?"
doesn't require allowing javascript of a million other servers?
half the images are broken because I’m expected to allow scripts on like 30+ sites to see most of the posts
software like noscript is not exactly beginner friendly. you're expected to understand the impact of your blocking and what you are blocking. the only domain you need to allow JS from on lemmy.world is lemmy.world. standard lemmy-ui does not load any js or css from third party sources, only the domain where lemmy-ui is served. your noscript configuration is blocking the actual images, not javascript that would be required to load images.
edit:
to expand on this, even in tor browser in safest mode, lemmy.world works totally fine when all you do is allow JS from lemmy.world on lemmy.world:
-
doesn't require allowing javascript of a million other servers?
half the images are broken because I’m expected to allow scripts on like 30+ sites to see most of the posts
software like noscript is not exactly beginner friendly. you're expected to understand the impact of your blocking and what you are blocking. the only domain you need to allow JS from on lemmy.world is lemmy.world. standard lemmy-ui does not load any js or css from third party sources, only the domain where lemmy-ui is served. your noscript configuration is blocking the actual images, not javascript that would be required to load images.
edit:
to expand on this, even in tor browser in safest mode, lemmy.world works totally fine when all you do is allow JS from lemmy.world on lemmy.world:
That looks cherry picked or very lucky. Can you show me a screenshot of Firefox with NoScript and allowing only lemmy.world and ANY other image from the first five results of the home page?
My result?
"The American Dream" discuss.online - BROKEN
"We are way overdue for an open source 2d printer" sub.wetshaving.social - BROKEN
"We never stood a chance." ani.social - BROKEN
"literally useless" lemmy.blahaj.zone - BROKEN
"Anime Recommendations" lemmy.dbzer0.com - Works (the one you show) -
That looks cherry picked or very lucky. Can you show me a screenshot of Firefox with NoScript and allowing only lemmy.world and ANY other image from the first five results of the home page?
My result?
"The American Dream" discuss.online - BROKEN
"We are way overdue for an open source 2d printer" sub.wetshaving.social - BROKEN
"We never stood a chance." ani.social - BROKEN
"literally useless" lemmy.blahaj.zone - BROKEN
"Anime Recommendations" lemmy.dbzer0.com - Works (the one you show)
nothing about this is cherry-picking. it's simply how lemmy works. there are no remote js sources. lemmy-ui even sets security headers that prevent loading js from third party domains.
-
Yes.
PieFed uses very minimal javascript (it 95% works with JS entirely disabled) and you can access all the same communities and posts.
Try it at https://piefed.social or any of these other instances - https://join.piefed.social/try
Looks nice is my immediate impression (looking at it with all javascript off, including ). Still would like thumbnails that are the entire image just much smaller, maybe via CSS. The cropping is very misleading on a lot of images. Perhaps one could use css-toggle-switch--not going to try to solution it, and I know last time I checked css wasn't great for it. But the results are notably different from lemmy.world for Active or Top past 12 hours. Not necessarily /bad/, particularly for top posts as they at least have a bit of engagement. But it seems like part of the solution is just don't incorporate results from servers that require javascript. Is it possible (ethical even) to incorporate them, but be a middle-man that saves the user from their javascript?
