hackershare / hackershare Goto Github PK

Hackershare is a powerful social bookmarking service and a knowledge-sharing community, with advanced search and tag management feature

Home Page: https://hackershare.dev

License: MIT License

Ruby 39.52% JavaScript 3.54% HTML 46.13% Shell 1.11% SCSS 0.35% PLpgSQL 8.79% Dockerfile 0.55%

hackernews delicious pocket reddit bookmark rss rss-feed producthunt

hackershare's Introduction

Hackershare

Social bookmarks website for hackers. Alternative to delicious, hackernews, pocket. Hackershare is the open source software which powers hackershare.dev

There is also a project introduction article for your reference: hackershare: Social bookmarking reinvented!

Dependencies

Setup local

PG extension install
rails db:create
rails db:migrate
rails db:seed_fu

Setup by Docker

Make a copy of the example environment file and modify as required [optional].

cp .env .env.local

Build the images.

docker-compose build

After building the image or after destroying the stack you would have to reset the database using the following command.

docker-compose run --rm rails bundle exec rails db:create
docker-compose run --rm rails bundle exec rails db:migrate
docker-compose run --rm rails bundle exec rails db:seed_fu

or 

docker-compose run --rm rails bundle exec rails db:reset
docker-compose run --rm rails bundle exec rails db:seed_fu

Run app

docker-compose up

stop app

docker-compose down

Deployment

Nginx conf sync: bundle exec cap production puma:nginx_config
Deploy: bundle exec cap production deploy

Chrome extension

Refresh sitemap

bundle exec rake sitemap:refresh

hackershare's People

Contributors

Stargazers

Watchers

Forkers

quantumghost novtopro haxine renyuanz naiveman huacnlee spiderevgn nbyun hjijin cuilei5205189 izayl helok haoqiqin lcshen zhanggenlove kervinchang saber233 laputaer aleksandarsavic zxhycxq narita1980 oh8 ajhs-io ynwa-ynwa weisk mammon163 ibinteractive benjaminx haoduohaoduo mr-craps dgrah50 b1pb1p r1der23 wooodhead thaivanan odysseyjason erikthought wyfkelly leijunjiang heis7777777 nimaarek chorylee cnye36 alessandrossecret nimrapro lawsssscat sharadjaiswal1411 xcplus mateothegreat raousama-2000

hackershare's Issues

I18n & SEO issue

https://support.google.com/webmasters/answer/189077?hl=en

Ruby

rust

elixir

https://feeds.feedburner.com/digest-elixir

postgres

Unable to docker-compose build

The docker-compose.yaml file should be fixed or at least we should have more instructions, follows the output of a build attempt:

ubuntu@bengal:~/WORKSPACE/hackershare$ sudo docker compose build
WARN[0000] The "RAILS_PORT" variable is not set. Defaulting to a blank string.
[+] Building 1.1s (7/8)
 => [hackershare-webpack:development internal] load build definition from webpack.Dockerfile                       0.0s
 => => transferring dockerfile: 161B                                                                               0.0s
 => [hackershare:development internal] load build definition from Dockerfile                                       0.0s
 => => transferring dockerfile: 2.31kB                                                                             0.0s
 => [hackershare-rails:development internal] load build definition from Dockerfile                                 0.0s
 => => transferring dockerfile: 2.31kB                                                                             0.0s
 => [hackershare-webpack:development internal] load .dockerignore                                                  0.0s
 => => transferring context: 252B                                                                                  0.0s
 => [hackershare-rails:development internal] load .dockerignore                                                    0.0s
 => => transferring context: 252B                                                                                  0.0s
 => [hackershare:development internal] load .dockerignore                                                          0.0s
 => => transferring context: 252B                                                                                  0.0s
 => ERROR [hackershare-webpack:development internal] load metadata for docker.io/library/hackershare:development   0.9s
 => CANCELED [hackershare-rails:development internal] load metadata for docker.io/library/ruby:2.7.2-alpine        1.0s
------
 > [hackershare-webpack:development internal] load metadata for docker.io/library/hackershare:development:
------
failed to solve: rpc error: code = Unknown desc = failed to solve with frontend dockerfile.v0: failed to create LLB definition: pull access denied, repository does not exist or may require authorization: server message: insufficient_scope: authorization failed

Problem: can follow oneself

Is it a bug to be able to follow oneself on the profile page? Screenshots as following.

SSRF in hackershare?

It seems that there's SSRF vulnerability in hackershare. See https://hackershare.dev/en/bookmarks/970288, the metadata of the server is exposed, which is not supposed to happen.

You can refer to https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html for more information on SSRF and how to fix this.

sharable url

https://hackershare.dev/cn?query=%E7%BC%96%E7%A8%8B

这个url生成应该用 https://hackershare.dev/cn//bookmarks/?query=%E7%BC%96%E7%A8%8B

登录时分享出去，不登录的人打开不对

Ruby China

V2EX

知乎

微信公众号

UI theme suggestion

https://www.figma.com/file/6UmYBUDCy2K1paIPy3n5VW/hackershare?node-id=0%3A1

I make a new theme use figma, hope this helps.

bookmark comment richtext support

#SEO 对于UGC生成的出站链接都应该添加`nofollow`

查看了下生成的HTML代码，现在的做法是对于用户分享的bookmark都通过生成一个/goto/链接做302跳转。这会带来一些SEO问题：

因为搜索引擎抓取时发现/goto/链接做了302跳转到新的地址了，所以它会继续去抓取目标页面的内容，然后收录索引，这就会产生重复内容的问题，通过在Google执行site:https://hackershare.dev/ goto/ bmpi就会发现它已经收录了两篇文章，并且用的链接是hackershare的链接，但是内容和https://www.bmpi.dev博客的链接内容完全一样，由于博客的内容要早于hackershare的内容，Google就会认为hackershare在复制其他站的内容，从而对hackershare做一些惩罚，可能会标记为垃圾站。

最佳的做法就是给/goto/链接做一个nofollow的标签属性，这方面可以参考Hacker News的做法，一般的分享站或者UGC的站都会对出站链接做nofollow。

tag synonym ring & preferred term admin

admin synonym ring, preferred term