F-Droid/Website Posts — Portuguese @ Hosted Weblate: The list of [allowed tags]({{ site.baseurl }}/docs/All_About_Descriptions_Graphics_and_Screenshots#html-descriptions) is now strictly …

Translation

Source change

English type: Bullet: '* '

Portuguese

Needs editing

Skip

	English	Portuguese	Actions
	This also means that there will be breakage, so this alpha will probably be more unstable than previous alphas have been over the years. We always appreciate testing, feedback, issues, and crash reports. But if your F-Droid is customized in a way you would rather not reset, then you might want to sit this alpha testing round out. If you have a spare device, test device, or work with Android emulators, we also are happy to have testing on our [nightly builds](https://gitlab.com/fdroid/fdroidclient-nightly). Be aware: the nightly builds come from GitLab CI/CD, so not as secure a release process as the official releases. It is possible to have both official and nightly installed at the same time. The easiest way to get started with the nightly builds is to add the [repo](https://fdroid.gitlab.io/fdroidclient-nightly/fdroid/repo/?fingerprint=659E1FD284549F70D13FB02C620100E27EEEA3420558CCE62B0F5D4CF2B77D84) to an existing F-Droid install, then search for "Nightly", then choose "F-Droid Debug".
	_This work was funded by the [FFDW-DVD grant]({% post_url 2022-02-05-decentralizing-distribution %})_
	Update to app descriptions
	F-Droid aims to give app developers a nice way to present their apps to users. Each app can include descriptions, related metadata, and [translations](https://docs.weblate.org/en/latest/formats.html#appstore). We have just updated the list of HTML formatting tags that are allowed in app descriptions to make it clearer what works and what does not. This should make it easier to sync the description texts with other app stores that also allow some HTML. There are two key [changes](https://gitlab.com/fdroid/jekyll-fdroid/-/merge_requests/77) to the website generation:
	Disallowed HTML tags are now automatically removed ("stripped"), whereas before they were escaped (e.g. `<script>`).
	The list of [allowed tags]({{ site.baseurl }}/docs/All_About_Descriptions_Graphics_and_Screenshots#html-descriptions) is now strictly enforced.	apps podem incluir [capturas de ecrã e recursos gráficos]({{ site.baseurl }}/docs/All_About_Descriptions_Graphics_and_Screenshots)
	This change was prompted by some security [issues](https://rubysec.com/advisories/CVE-2022-23515/) in Loofah, the tool we rely on to strip dangerous HTML from the app descriptions. f-droid.org uses multiple layers of defense, that greatly limits the scope of security vulnerabilities. For example, this site includes a [Content Security Policy](https://gitlab.com/fdroid/fdroid-website/-/blob/dee66df9ba5c9bc5608d2292a456615e005c33c9/.htaccess#L321) that disables the most dangerous features, and [limits](https://observatory.mozilla.org/analyze/f-droid.org) the rest to URLs that are part of this site.
	For those interested in the technical details: HTML allows data blobs to be included inline via the `data:` scheme. That can then be abused to load malicious things. Loofah was not properly handling those. This site's Content Security Policy already disallows all uses of `data:`, so it was not an issue here. The `self` keyword means "[only allow resources from the current origin](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy#self)", and that is `https://f-droid.org`.
	UnifiedPush: a decentralized, open-source push notification protocol
	A modern Android smartphone relies on a lot of services, from app stores and calendars to messaging and push notifications. Most of them have open alternatives, but until now, the only option for push notifications was Google's proprietary service, Firebase Cloud Messaging (FCM). UnifiedPush is a new alternative that allows you to get push notifications without being tied to a single company.
	Push notifications are essential to the modern mobile experience because they allow apps to communicate with users in real-time, even when not actively in use. Relying on Google-provided push notifications is a concern for both privacy and independence. The proprietary FCM library cannot be included in F-Droid apps and relies on having Google services. As a result, it is common to see FOSS applications adopt a persistent direct connection between the application and the server as an alternative.

Loading…

None

String updated in the repository

English

Portuguese 130 characters edited Current translation Needs editing

a year ago

None

Source string changed

English 84 characters edited

a year ago

Browse all string changes

Things to check

Mismatched full stop

Source and translation do not both end with a full stop

Reset

Markdown links

Markdown links do not match source

Reset

Glossary

English	Portuguese
Tags	Marcações	F-Droid Glossary

String information

Source string description

type: Bullet: '* '

Flags

md-text, safe-html

Source string location

_posts/2022-12-15-update-to-app-descriptions.md

String age

a year ago

Last updated

11 months ago

Source string age

a year ago

Translation file

po/_posts.pt.po, string 3309