<turbo-stream action="append" target="posts_list"><template>    <div class="postbit" id="19540" data-post-id="19540">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="mackenza" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/mackenza/120/189_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  mackenza
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>Hi <a class="mention" href="/u/zorbash" rel="nofollow">@zorbash</a> . Thanks for getting Kitto going, I think it is a really good initiative. While I usually don’t love the “it’s this project rewritten in this technology”, I think Kitto could be a nice exception <img src="https://forum.elixirforum.com/images/emoji/apple/wink.png?v=15" title=":wink:" class="emoji" alt=":wink:" loading="lazy" width="20" height="20"> Especially if you have plans to make it diverge from Dashing/Smashing and make it more uniquely Elixir-fied.</p>
<p>I did have a question about the data returned from a block job.</p>
<p>For example, there is the <code>text</code> widget:</p>
<pre><code>import React from 'react';
import Widget from '../../assets/javascripts/widget';

import './text.scss';

Widget.mount(class Text extends Widget {
  render() {
    return (
      &lt;div className={this.props.className}&gt;
        &lt;h1 className="title"&gt;{this.props.title}&lt;/h1&gt;
        &lt;h3&gt;{this.state.text || this.props.text}&lt;/h3&gt;
        &lt;p className="more-info"&gt;{this.props.moreinfo}&lt;/p&gt;
      &lt;/div&gt;
    );
  }
});
</code></pre>
<p>This seems to imply that the only dynamic text I can put in my <code>text</code> widget is the <code>&lt;h3&gt;</code> text with <code>this.state.text</code> . Am I reading that correctly?</p>
<p>Since <code>text</code> is a core, built-in widget, would it be more useful if there was less hard-coded text and more dynamic text? Or is the intention for users to always extend the widgets and the ones in the <code>kitto.new</code> are just examples?</p>
<p>Thanks again</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="19540" data-batch-url="/posts/batch_likers">
                        0
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/12">Post #11</a>
	                </div>
	            </div>
              <div id="likers-container-19540" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="19540"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #11"></div>
  </section>
</div>
    <div class="postbit" id="19634" data-post-id="19634">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="zorbash" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/zorbash/120/4846_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  zorbash
                    <span class="op-star" title="Thread Starter">
                      <img alt="OP" class="op-star-icon" src="/assets/thread-icons/thread-icon-thread-starter-df91e872.png" />
                    </span>
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>I had plans from the beginning to diverge from Dashing/Smashing and that’s why there’s nowhere in the documentation a promise for compatibility between the projects. Building it on some of the conventions of Dashing though can hopefully make people using it more productive and eager to port existing dashboards to Kitto (and even find an excuse to introduce Elixir at work <img src="https://forum.elixirforum.com/images/emoji/apple/innocent.png?v=15" title=":innocent:" class="emoji" alt=":innocent:" loading="lazy" width="20" height="20">)</p>
<p>Concerning your question abou the <code>text</code> widget, you’re right about it having only one dynamic attribute at the moment.<br>
Changing it to have more or all of its attributes dynamic is quite simple and i wouldn’t mind if the default generated text widget<br>
had all of them dynamic (feel free to submit a PR about this).</p>
<p>Keep in mind that even core widgets are generated in any new dashboard app instead of being bundled somehow to allow the user to see the source code, and adapt it accordingly.</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="19634" data-batch-url="/posts/batch_likers">
                        1
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/13">Post #12</a>
	                </div>
	            </div>
              <div id="likers-container-19634" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="19634"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #12"></div>
  </section>
</div>
    <div class="postbit" id="28610" data-post-id="28610">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="zorbash" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/zorbash/120/4846_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  zorbash
                    <span class="op-star" title="Thread Starter">
                      <img alt="OP" class="op-star-icon" src="/assets/thread-icons/thread-icon-thread-starter-df91e872.png" />
                    </span>
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>New Security release for Kitto.</p>
<p>The latest <a href="https://github.com/kittoframework/kitto/tree/v0.5.2" rel="noopener nofollow ugc">v0.5.2</a> release contains various security fixes listed below:</p>
<p>3 security vulnerabilities have been disclosed to us by <a class="mention" href="/u/griffinbyatt" rel="nofollow">@griffinbyatt</a></p>
<ol>
<li>Directory Traversal</li>
</ol>
<aside class="onebox githubcommit" data-onebox-src="https://github.com/kittoframework/kitto/commit/511bfd09d089219bef9fbcb38badcf9b29eab91b">
  <header class="source">

      <a href="https://github.com/kittoframework/kitto/commit/511bfd09d089219bef9fbcb38badcf9b29eab91b" target="_blank" rel="noopener nofollow ugc">github.com/kittoframework/kitto</a>
  </header>

  <article class="onebox-body">
    <div class="github-row">
  <div class="github-icon-container" title="Commit">
    <svg width="60" height="60" class="github-icon" viewBox="0 0 14 16" aria-hidden="true"><path fill-rule="evenodd" d="M10.86 7c-.45-1.72-2-3-3.86-3-1.86 0-3.41 1.28-3.86 3H0v2h3.14c.45 1.72 2 3 3.86 3 1.86 0 3.41-1.28 3.86-3H14V7h-3.14zM7 10.2c-1.22 0-2.2-.98-2.2-2.2 0-1.22.98-2.2 2.2-2.2 1.22 0 2.2.98 2.2 2.2 0 1.22-.98 2.2-2.2 2.2z"></path></svg>
  </div>

  <div class="github-info-container">
    <h4>
      <a href="https://github.com/kittoframework/kitto/commit/511bfd09d089219bef9fbcb38badcf9b29eab91b" target="_blank" rel="noopener nofollow ugc">Asserts that requested template is in the templates directory</a>
    </h4>

    <div class="github-info">
      <div class="date">
        committed <span class="discourse-local-date" data-format="ll" data-date="2017-03-29" data-time="18:20:45" data-timezone="UTC">06:20PM - 29 Mar 17 UTC</span>
      </div>

      <div class="user">
        <a href="https://github.com/davejlong" target="_blank" rel="noopener nofollow ugc">
          <img alt="" src="https://avatars.githubusercontent.com/u/175317?v=4" class="onebox-avatar-inline" width="20" height="20">
          davejlong
        </a>
      </div>

      <div class="lines" title="changed 2 files with 34 additions and 16 deletions">
        <a href="https://github.com/kittoframework/kitto/commit/511bfd09d089219bef9fbcb38badcf9b29eab91b" target="_blank" rel="noopener nofollow ugc">
          <span class="added">+34</span>
          <span class="removed">-16</span>
        </a>
      </div>
    </div>
  </div>
</div>

  <div class="github-row">
    <p class="github-body-container">Closes a remote file read vulnerability where a user could break out of the
temp<span class="show-more-container"><a href="https://github.com/kittoframework/kitto/commit/511bfd09d089219bef9fbcb38badcf9b29eab91b" target="_blank" rel="noopener nofollow ugc" class="show-more">…</a></span><span class="excerpt hidden">lates directory and read other files on the host.</span></p>
  </div>

  </article>

  <div class="onebox-metadata">
    
    
  </div>

  <div style="clear: both"></div>
</aside>

<ol start="2">
<li>XSS in 404 page</li>
</ol>
<aside class="onebox githubcommit" data-onebox-src="https://github.com/kittoframework/kitto/commit/63570c063c00612d0f0ffa27145fe07a53cb98d8">
  <header class="source">

      <a href="https://github.com/kittoframework/kitto/commit/63570c063c00612d0f0ffa27145fe07a53cb98d8" target="_blank" rel="noopener nofollow ugc">github.com/kittoframework/kitto</a>
  </header>

  <article class="onebox-body">
    <div class="github-row">
  <div class="github-icon-container" title="Commit">
    <svg width="60" height="60" class="github-icon" viewBox="0 0 14 16" aria-hidden="true"><path fill-rule="evenodd" d="M10.86 7c-.45-1.72-2-3-3.86-3-1.86 0-3.41 1.28-3.86 3H0v2h3.14c.45 1.72 2 3 3.86 3 1.86 0 3.41-1.28 3.86-3H14V7h-3.14zM7 10.2c-1.22 0-2.2-.98-2.2-2.2 0-1.22.98-2.2 2.2-2.2 1.22 0 2.2.98 2.2 2.2 0 1.22-.98 2.2-2.2 2.2z"></path></svg>
  </div>

  <div class="github-info-container">
    <h4>
      <a href="https://github.com/kittoframework/kitto/commit/63570c063c00612d0f0ffa27145fe07a53cb98d8" target="_blank" rel="noopener nofollow ugc">Don't display the dashboard name for 404s</a>
    </h4>

    <div class="github-info">
      <div class="date">
        committed <span class="discourse-local-date" data-format="ll" data-date="2017-03-29" data-time="22:43:00" data-timezone="UTC">10:43PM - 29 Mar 17 UTC</span>
      </div>

      <div class="user">
        <a href="" rel="noopener nofollow">
          <img alt="" src="" class="onebox-avatar-inline" width="20" height="20">
          
        </a>
      </div>

      <div class="lines" title="changed 1 files with 1 additions and 1 deletions">
        <a href="https://github.com/kittoframework/kitto/commit/63570c063c00612d0f0ffa27145fe07a53cb98d8" target="_blank" rel="noopener nofollow ugc">
          <span class="added">+1</span>
          <span class="removed">-1</span>
        </a>
      </div>
    </div>
  </div>
</div>


  </article>

  <div class="onebox-metadata">
    
    
  </div>

  <div style="clear: both"></div>
</aside>

<ol start="3">
<li>DoS from query parameter conversion to Atoms (since they’re not Garbage-Collected)</li>
</ol>
<aside class="onebox githubcommit" data-onebox-src="https://github.com/kittoframework/kitto/commit/5323717e4ac978144bcf89169dce9d79a4c2bdb6">
  <header class="source">

      <a href="https://github.com/kittoframework/kitto/commit/5323717e4ac978144bcf89169dce9d79a4c2bdb6" target="_blank" rel="noopener nofollow ugc">github.com/kittoframework/kitto</a>
  </header>

  <article class="onebox-body">
    <div class="github-row">
  <div class="github-icon-container" title="Commit">
    <svg width="60" height="60" class="github-icon" viewBox="0 0 14 16" aria-hidden="true"><path fill-rule="evenodd" d="M10.86 7c-.45-1.72-2-3-3.86-3-1.86 0-3.41 1.28-3.86 3H0v2h3.14c.45 1.72 2 3 3.86 3 1.86 0 3.41-1.28 3.86-3H14V7h-3.14zM7 10.2c-1.22 0-2.2-.98-2.2-2.2 0-1.22.98-2.2 2.2-2.2 1.22 0 2.2.98 2.2 2.2 0 1.22-.98 2.2-2.2 2.2z"></path></svg>
  </div>

  <div class="github-info-container">
    <h4>
      <a href="https://github.com/kittoframework/kitto/commit/5323717e4ac978144bcf89169dce9d79a4c2bdb6" target="_blank" rel="noopener nofollow ugc">Don't convert topics from params to Atoms</a>
    </h4>

    <div class="github-info">
      <div class="date">
        committed <span class="discourse-local-date" data-format="ll" data-date="2017-03-30" data-time="22:32:24" data-timezone="UTC">10:32PM - 30 Mar 17 UTC</span>
      </div>

      <div class="user">
        <a href="https://github.com/zorbash" target="_blank" rel="noopener nofollow ugc">
          <img alt="" src="https://avatars.githubusercontent.com/u/645514?v=4" class="onebox-avatar-inline" width="20" height="20">
          zorbash
        </a>
      </div>

      <div class="lines" title="changed 1 files with 3 additions and 4 deletions">
        <a href="https://github.com/kittoframework/kitto/commit/5323717e4ac978144bcf89169dce9d79a4c2bdb6" target="_blank" rel="noopener nofollow ugc">
          <span class="added">+3</span>
          <span class="removed">-4</span>
        </a>
      </div>
    </div>
  </div>
</div>


  </article>

  <div class="onebox-metadata">
    
    
  </div>

  <div style="clear: both"></div>
</aside>

<p>Please mind to upgrade.</p>
<p>Special thanks to <a class="mention" href="/u/davejlong" rel="nofollow">@davejlong</a> and <a class="mention" href="/u/griffinbyatt" rel="nofollow">@griffinbyatt</a> for the their swift and responsible work.</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="28610" data-batch-url="/posts/batch_likers">
                        6
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/14">Post #13</a>
	                </div>
	            </div>
              <div id="likers-container-28610" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="28610"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #13"></div>
  </section>
</div>
    <div class="postbit" id="43388" data-post-id="43388">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="vfsoraki" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/vfsoraki/120/11605_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  vfsoraki
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>Have you looked at <a href="https://github.com/grych/drab" rel="noopener nofollow ugc">Drab</a>?</p>
<p>With this, you could eliminate React dependency, just clean Elixir code.</p>
<p>Just a thought though <img src="https://forum.elixirforum.com/images/emoji/apple/slight_smile.png?v=15" title=":slight_smile:" class="emoji" alt=":slight_smile:" loading="lazy" width="20" height="20"></p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="43388" data-batch-url="/posts/batch_likers">
                        4
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/15">Post #14</a>
	                </div>
	            </div>
              <div id="likers-container-43388" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="43388"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #14"></div>
  </section>
</div>
    <div class="postbit" id="44532" data-post-id="44532">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="zorbash" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/zorbash/120/4846_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  zorbash
                    <span class="op-star" title="Thread Starter">
                      <img alt="OP" class="op-star-icon" src="/assets/thread-icons/thread-icon-thread-starter-df91e872.png" />
                    </span>
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p><a class="mention" href="/u/vfsoraki" rel="nofollow">@vfsoraki</a> Thanks for the suggestion, it’s a really interesting project! But has phoenix as a requirement and Kitto is not built on phoenix, it just uses Plug, also uses Server Sent Events instead of WebSockets.</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="44532" data-batch-url="/posts/batch_likers">
                        1
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/16">Post #15</a>
	                </div>
	            </div>
              <div id="likers-container-44532" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="44532"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #15"></div>
  </section>
</div>
    <div class="postbit" id="291824" data-post-id="291824">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="chrisdel101" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/chrisdel101/120/29610_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  chrisdel101
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>is this library still supported?</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="291824" data-batch-url="/posts/batch_likers">
                        0
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/kitto-a-framework-for-interactive-dashboards/2089/17">Post #16</a>
	                </div>
	            </div>
              <div id="likers-container-291824" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="291824"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-last-post cat-last-post" title="Last post!"></div>
  </section>
</div>
</template></turbo-stream><turbo-stream action="replace" target="load-more-container"><template><div id="load-more-container" class="load-more-container">
    <span class="all-loaded">— All posts loaded —</span>
</div></template></turbo-stream>