Conversations icon indicating copy to clipboard operation
Conversations copied to clipboard

Preview HTTP and HTTPS URLs

Open PanderMusubi opened this issue 9 years ago • 35 comments

Please, offer preview HTTP and HTTPS URLs in similar way WhatsApp and Telegram does. Make this an optional feature.

PanderMusubi avatar Mar 21 '16 10:03 PanderMusubi

This can raise some privacy issues.

licaon-kter avatar Mar 21 '16 10:03 licaon-kter

Therefore should it be an option which is off by default. Perhaps a small warning should be shown when it is enabled or near the setting of the option.

PanderMusubi avatar Mar 21 '16 11:03 PanderMusubi

I'm neither using WhatsApp nor Telegram so I don't know what you mean. Can you either describe this in more detail or illustrate with a screenshot what you mean.

iNPUTmice avatar Mar 21 '16 11:03 iNPUTmice

https://telegram.org/blog/link-preview

licaon-kter avatar Mar 21 '16 11:03 licaon-kter

It would only apply to the first url with HTTP or HTTPS that is found in the message. If there is an error, display nothing.

PanderMusubi avatar Mar 21 '16 11:03 PanderMusubi

Usually this is something that is being handled on the server side. Currently there is no XEP for this.

Better resources: http://ogp.me and http://telegram.wiki/tips:linkpreview

iNPUTmice avatar Mar 21 '16 11:03 iNPUTmice

Yes, that is indeed helpful in finding the correct data to preview. However, a fallback is usually also implemented, by using the first image found in the page and Dublin Core is sometimes also used. See for example

<head profile="http://a9.com/-/spec/opensearch/1.1/" prefix="og: http://ogp.me/ns#">
  ...
  <title>FOSDEM 2016 - Home</title>
  <link rel="schema.DC" href="http://purl.org/DC/elements/1.0/" />
  <meta name="DC.Title" content="Home"/>
  <meta name="DC.Format" content="text/html" />
  <meta name="DC.Language" content="en" />
  <meta name="DC.Subject" content="FOSDEM 2016" />
  <meta name="DC.Rights" content="http://creativecommons.org/licenses/by-sa/2.0/be/" />
  <meta property="og:title" content="FOSDEM 2016 - Home" />
  <meta property="og:type" content="website" />
  <meta property="og:image" content="https://fosdem.org/2016/assets/style/logo-gear-7204a6874eb0128932db10ff4030910401ac06f4e907f8b4a40da24ba592b252.png" />
</head>

PanderMusubi avatar Mar 21 '16 11:03 PanderMusubi

This will be very useful for spammers. "click here to buy some... http://..." and Conversation clicks for you.

jkufner avatar Mar 22 '16 00:03 jkufner

Perhaps it should be configurable per account to have more control over it. Personally I never have spammers on my chats or conferences.

PanderMusubi avatar Mar 22 '16 09:03 PanderMusubi

Hmm... In times of Stagefright when you only need an mp4 video to infect an Android device you probably don't want display any media by default.

SecTec avatar Mar 30 '16 16:03 SecTec

Whats About Latex??? https://modules.prosody.im/mod_latex.html

DoM1niC avatar Apr 26 '16 21:04 DoM1niC

What kind of imbecile sends LaTeX through instant messaging?

ghost avatar Apr 26 '16 21:04 ghost

What about your language, eh?

And yes, LaTeX is very helpful for scientific conversations.

And above all, why should LaTeX be stranger than HTML?

Natureshadow avatar Apr 27 '16 17:04 Natureshadow

I, too, enjoy typing LaTeX on a mobile phone. No better way to spend the day than to type endless backslashes and all sorts of brackets with your thumb. While we're at it, why not add LaTeX autocomplete as well? In fact Conversations should also recognise if the content of a message is written in a certain programming language and colour code everything. Maybe add an option to auto-execute as well, as long as it's an expert option nothing's wrong.

What you are suggesting is pure feature creep, completely useless bloat that only a few ultra nerds will use to show off. I don't even think providing previews of HTTP URLs is necessary but at least it could maybe be of some use sometime for someone.

LaTeX works relatively well for writing documents. Don't shoehorn it into things it has nothing to do with.

ghost avatar Apr 27 '16 22:04 ghost

I suggest LaTeX voters to open a separate issue. I vote for the opt-in preview feature with option: Off (default); Only in conversations with buddies in blist; In all conversations (dangerous, double check!).

ildar avatar Mar 27 '18 17:03 ildar

Also I guess that showing image previews scaled down by Conversations may be considered quite safe (?). Though not quite sure.

ildar avatar Mar 27 '18 17:03 ildar

Hi,

I have that feature in my SMS/MMS app (Textra) and I would gladly have it in Conversaionts app. If I send nor receive an url link, Textra read tag:

<meta property="og:description" content="">

and put it as website description and

<meta property="og:image" content="">

tag for image preview. It look really nice and its sometimes helpful because I know what is in url without opening it in a browser ;)

About privacy/security: This feature should be/or would be disabled for people who not receive our presence subscription, so if spammer send as link, then conversation would not display its preview :)

andypl avatar Jul 03 '19 11:07 andypl

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar May 01 '20 07:05 stale[bot]

Privacy/Security: enable previews only for known contacts. Security: also possible to use Adblock or Mozilla URL reputational DBs, probably through a plugin. What do you think?

ildar avatar May 01 '20 08:05 ildar

Firefox can be used as a webview so you'd gain any security features loaded there.

But how do you use that? Load the page in background and save a screeenshot?

licaon-kter avatar May 01 '20 15:05 licaon-kter

URL preview just shows a few meaningful words and the 1st picture downsized. I don't see how FF can help here.

ildar avatar May 01 '20 17:05 ildar

@ildar to get that you'll need to parse something, if that metadata is not in HEAD you'll fallback to what?

licaon-kter avatar May 01 '20 17:05 licaon-kter

Anyway that Pix-Art fork gone a lot further in this feature.

ildar avatar Aug 01 '20 19:08 ildar

@ildar Did you use that and found it useful? Working? Not annoying?

Maybe I'm the only one where the preview disappears at random and the servers are contacted every time I hit back on or open the chat.

licaon-kter avatar Aug 01 '20 20:08 licaon-kter

I'm not saying how good it's implemented in P-A-M. It is offtopic here, in Conversations tracker. Plz mention me at the corresponding issue at P-A-M I'm just pointing users to alternative(s) in this stagnated issue.

ildar avatar Aug 02 '20 07:08 ildar

Maybe this helps: https://www.mysk.blog/2020/10/25/link-previews/

licaon-kter avatar Oct 29 '20 10:10 licaon-kter

This is a good overview but given Conversations design decisions (E2EE as first-class feature) this leaves out server generated previews ("Approach 3").

Now whichever option you pick the preview display should be strictly limited to "trusted" contacts. The same logic that affects file autodownload can be reused.

If the preview was to be generated on the sender side then this additionally requires full-stanza encryption.

wiktor-k avatar Oct 29 '20 13:10 wiktor-k

~~Blabber now allows server owners to host their own preview scripts 👍 https://codeberg.org/kriztan/blabber.im/commit/8287e3e39e9aac7de28aebb00b93459057289f0b~~ Wrong issue

licaon-kter avatar Jan 08 '21 16:01 licaon-kter

@licaon-kter this is not correct. This is only the server rendered map preview and not a http preview. Http previews are generated in the app.

kriztan avatar Jan 08 '21 16:01 kriztan

Given the current state of development of conversation.im (functional and excellent), I think this feature of OGP content preview is currently the most dearly missed feature when compared with all other IM clients we used previously (sms,facebook,steam)

In response to previous discussion

I believe it should be enabled by default but possible to turn off for the few who would turn it off

In a perfect world the OGP content request would be performed by the xmpp server or another trusted proxy, thus protecting the user's anonymity and hidden presence

There should be a manual fallback preview method if OGP is not supported by the URL

It should be possible for the person who sends the URL, to push preview data so that the recipient doesn't have to get it for themselves (imagine posting a link to a 100 user chat room, it would be wasteful for have every client in that chatroom hammer the server with requests when the original sender could have bundled the title and thumbnail automatically with his URL)

If a URL has a title and thumbnail, omit or trunkate the displaying the URL ?

shodanx2 avatar Jul 05 '22 21:07 shodanx2