RedPacket SecurityCVE Alert: CVE-2026-0686 - pfefferle - Webmention - https://www.redpacketsecurity.com/cve-alert-cve-2026-0686-pfefferle-webmention/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-0686 #pfefferle #webmention
Jonathan Kamens 86 47From an end-user perspective, it's annoying inbound #ActivityPub functionality in #WordPress requires a separate #Webmention plugin rather than being built into the ActivityPub plug-in.
This makes sense from a _protocol_ point of view, since full-fledged ActivityPub servers can function entirely without sending each other Webmentions, but it really doesn't make sense from a user experience point of view.
This makes sense from a _protocol_ point of view, since full-fledged ActivityPub servers can function entirely without sending each other Webmentions, but it really doesn't make sense from a user experience point of view.
I just went down this rabbithole:
Me: "Why aren't fediverse replies showing up as comments on my #WordPress blog postings?"
Me: [searches all over, finds stuff about configuring this in the block editor, discovers that my theme does not support the block editor, spends hours trying to find a theme I can tolerate that supports the block editor, eventually realizes that actually the problem isn't the non-block theme, it's that I didn't have the #Webmention plug-in installed. *sigh*]
Me: "Why aren't fediverse replies showing up as comments on my #WordPress blog postings?"
Me: [searches all over, finds stuff about configuring this in the block editor, discovers that my theme does not support the block editor, spends hours trying to find a theme I can tolerate that supports the block editor, eventually realizes that actually the problem isn't the non-block theme, it's that I didn't have the #Webmention plug-in installed. *sigh*]
Open MentionsThe Fun To Reply To Tipline
I’m looking for fun posts to reply to that I can feature here. Ideally, WebMention-enabled or ActivityPub-ready, but anything that would be fun to leave a reply to counts.
Please reply, mention, or comment with your suggestions (yes, your own stuff counts).
#ActivityPub #WebMention
Khürt WilliamsDoes it matter?
(This post is being modified)
Matthias OttJust published a small enhancement and bugfix release for the #Webmention for #Craft CMS plugin.
It adds two important details though: lazy loading and alt text support for avatar images. 😎
https://github.com/matthiasott/webmention/releases/tag/v1.0.5
👾 ~dan## __**Note** from: Mon, 02 Mar 2026 17:26 CET
I checked and fixed my whole website on the envs pubnix with 'npm exec html-validate'. No more warnings unless they're expected, like empty <a> tags, which are needed for webmentions on pages, blog posts and notes.
I restructured the CSS stylesheets, but kept the look as good as I could like the envs main site. All bash and PHP/JavaScript scripts run as they should. My blog management scripts SHOULD work well enough and the written notes are always checked after editing with 'npm exec html-validate, so I can immediately spot any errors on the posts or notes before I really publish them and can defer/edit them again until no more errors occur.
I never built a complete website before and I'm really proud of it. Especially the integration for webmentions with ActivityPub support was not so easy, because I didn't want to use some fully developed blogging engine like Wordpress or something like this, which certainly have plugins for implementing webmentions and ActivityPub. I did this all by myself, allthough I'm using services like webmention.io and brid.gy. But the tools to post were developed by myself.
You can visit my page at https://dan.envs.net/ and have a look at it.
#envs #php #css #javascript #webmention #activitypub #development #indieweb
(https://dan.envs.net/notes/2026-03-02T17:26)
I checked and fixed my whole website on the envs pubnix with 'npm exec html-validate'. No more warnings unless they're expected, like empty <a> tags, which are needed for webmentions on pages, blog posts and notes.
I restructured the CSS stylesheets, but kept the look as good as I could like the envs main site. All bash and PHP/JavaScript scripts run as they should. My blog management scripts SHOULD work well enough and the written notes are always checked after editing with 'npm exec html-validate, so I can immediately spot any errors on the posts or notes before I really publish them and can defer/edit them again until no more errors occur.
I never built a complete website before and I'm really proud of it. Especially the integration for webmentions with ActivityPub support was not so easy, because I didn't want to use some fully developed blogging engine like Wordpress or something like this, which certainly have plugins for implementing webmentions and ActivityPub. I did this all by myself, allthough I'm using services like webmention.io and brid.gy. But the tools to post were developed by myself.
You can visit my page at https://dan.envs.net/ and have a look at it.
#envs #php #css #javascript #webmention #activitypub #development #indieweb
(https://dan.envs.net/notes/2026-03-02T17:26)
## __**Note** from: Tue, 24 Feb 2026 00:45 CET
Link
I've now implemented a feed for short notes, replies, likes, reposts and bookmarks which fully support webmentions and you can also reply to these notes with webmentions.
The pages are not the most beautiful, but I want to have the default look of the envs.net pubnix, although I did some little tweaks to the CSS file for supporting webmentions.
The notes feed page can be accessed with https://dan.envs.net/notes which aggregates the latest 10 notes. Support for browsing all articles will be implemented soon. For now I'm satisfied with the notes page, bacause I did all the PHP, CSS and JS by myself and wrote some bash scripts to manage my blog articles and my notes.
This post also serves as a **first test** , so things can go wrong, but I tested everything as good as I could. So if you're reading this, everything should be fine.
**Hashtags:** #envs #indieweb #webmention #pubnix
~dan |
---|---
Website: | https://dan.envs.net
Email: | ~dan <[email protected]>
XMPP JID: | [email protected]
Mastodon/ActivityPub: | @dan
Keyoxide.org: | ~dan <[email protected]>
About me: | I'm an enthusiastic computer and IT hobbyist, but I'm not a professional at all. All I've learned in that field, was a private endeavor. (https://dan.envs.net/notes/2026-02-24T00:45)
Link
I've now implemented a feed for short notes, replies, likes, reposts and bookmarks which fully support webmentions and you can also reply to these notes with webmentions.
The pages are not the most beautiful, but I want to have the default look of the envs.net pubnix, although I did some little tweaks to the CSS file for supporting webmentions.
The notes feed page can be accessed with https://dan.envs.net/notes which aggregates the latest 10 notes. Support for browsing all articles will be implemented soon. For now I'm satisfied with the notes page, bacause I did all the PHP, CSS and JS by myself and wrote some bash scripts to manage my blog articles and my notes.
This post also serves as a **first test** , so things can go wrong, but I tested everything as good as I could. So if you're reading this, everything should be fine.
**Hashtags:** #envs #indieweb #webmention #pubnix
~dan |
---|---
Website: | https://dan.envs.net
Email: | ~dan <[email protected]>
XMPP JID: | [email protected]
Mastodon/ActivityPub: | @dan
Keyoxide.org: | ~dan <[email protected]>
About me: | I'm an enthusiastic computer and IT hobbyist, but I'm not a professional at all. All I've learned in that field, was a private endeavor. (https://dan.envs.net/notes/2026-02-24T00:45)
花島Saki所以…… #Mastodon 并没有支持 #Webmention 提及的回复技术，看起来是这样
Luciana MorinInterações na blogosfera e mastodon
Estava com saudades do tipo de interação espontânea entre estranhos que é a marca da blogosfera. Tenho certeza de que se tivesse compartilhado meu post de retorno em uma página nova no Instagram, ninguém o veria e teria zero interações. Estaria falando para as paredes. Já no Mastodon, mesmo com zero seguidores, fui muito bem recebida! Lá vi o perfil do Leandro, curti a página dele e assinei seu feed RSS. Isso desencadeou uma série de outras interações. Uma vez que assinei o […]