Feature Ideas

Introduction

There are many features that one can think of for MediaGoblin. Some should be implemented really soon, because they are needed right now. Other features would be nice to have, but are currently really hard to implement. And finally there are the Feature Ideas that can be classified as "brain storming".

This wiki page is mostly for long term feature ideas. This specifically means there are no promises that anything listed here will ever happen. It means nobody is currently working on this feature.

If you have an idea for a new feature, that is not listed here or in the Bug Tracker, please talk to some developers, or add it below in the "Yet Unsorted Ideas" section. If you really think, that your idea is extremely important and needs to be acted upon soon, you could file a bug.

The List

If there is a bug (closed or open), please link to it.

Yet Unsorted Ideas

Put your new ideas here:

• flickr Import
• Two federation ideas
• Copy (some) metadata from the full‐size image into the smaller versions. If possible (according to metadata formats), add a note to them that they are not exactly the original.
  • #381: exif data handling for users (about privacy)
  • #284: Support "Orientation" EXIF tag
• Display more info about the file on its page
  • Resolution of the original
  • File size of the original
  • Resolution of the scaled-down version
  • EXIF info?
  • For non-still-images:
    • Duration
    • Bitrate
    • Format structure (e.g. “Ogg/Theora+Vorbis”)
• Renaming of an account
  • by its user
  • by an admin
• Account creation / activation, considering e-mail address
  • Expire inactive accounts
  • A method of account activation: ask the user to send e-mail message with a specified text from the address they entered, instead of GMG sending a message to that address (which could be somebody else’s).
    • What about faked addresses? If that’s a serious problem for this, could it still be a requirement? Or is it so serious that it would bother malicious misusers least of all people? --Aleksejrs 15:17, 7 December 2011 (EST)
  • The above allows accepting multiple inactive accounts for the same e-mail address without bothering its owner and without making it difficult for him to register.
    • But accounts could have the same name… --Aleksejrs 15:14, 7 December 2011 (EST)

Security related ideas / Features

• DONE: CSRF (#361)
• X-Content-Type-Options: nosniff

  Served pages have the content-type set. And the browser should not be allowed to guess a different type. See: Firefox bug #471020

• "Content Security Policy" (CSP) might really be a good add on to have. Noone should rely solely on this, but it might make things a lot safer if other security guards fail.

  A simple allow 'self' might already get a lot of things better.

  Link1 Link2

• Possibly disallowing pages to be shown in frames.

Long term things that might happen

• "trans-tagging": Adding tags to other peoples media #584
  • Many images usecase#Crowd tagging/captioning/commenting
• Branding: There should be some simple settable options to "personalize" the instance without fiddling with templates
  • #613: Make the base of page titles customizable.