CB/ui: Add consent message and cleaner warning #108

Merged
ashimokawa merged 1 commit from n0toose/ui-registration-consent into codeberg-11 2025-10-10 23:28:30 +02:00 AGit
Contributor
  • Inform people about the ToU and Privacy Policy.
  • Inform people about their accounts getting deleted right after.
  • Use less space for the warning.
- Inform people about the ToU and Privacy Policy. - Inform people about their accounts getting deleted right after. - Use less space for the warning.
Author
Contributor

Template applied to a Forgejo tree.

image

Template applied to a Forgejo tree. ![image](/attachments/9d22513e-64ee-4497-bd21-50234da561b6)
Contributor

Can't we just remove this warning? I doubt that real spammers will be stopped by that. And for proper users that has no impact.

Edit: The consent message looks good!

Can't we just remove this warning? I doubt that real spammers will be stopped by that. And for proper users that has no impact. Edit: The consent message looks good!
Author
Contributor

I doubt that real spammers will be stopped by that. And for proper users that has no impact.

I'd agree somewhat, but I tried to make it more low-key/tasteful for starters. I also had the implicit goal of getting people to read the ToU. I presume this was added by @ashimokawa

> I doubt that real spammers will be stopped by that. And for proper users that has no impact. I'd agree somewhat, but I tried to make it more low-key/tasteful for starters. I also had the implicit goal of getting people to read the ToU. I presume this was added by @ashimokawa
@ -50,0 +42,4 @@
</div>
<div class="ui message" style="text-align: start; color:var(--color-warning-text);" tabindex=0 aria-labelledby="warning">
<p id="warning">Using Codeberg for SEO spam, spreading warez and IPTV links, or uploading large amounts of copyrighted, non-free material <b>will</b> result in an immediate ban with <b>no prior warning</b>.</p>
First-time contributor

why is this p labeled with id="warning"? For styling, I would've expected class="warning"

why is this `p` labeled with `id="warning"`? For styling, I would've expected `class="warning"`
Author
Contributor

I did this as I followed the aria-labelledby approach preceding my change.

I did this as I followed the `aria-labelledby` approach preceding my change.
Owner

@n0toose

or uploading large amounts of copyrighted

Sounds if uploading small amounts of copyrighted material is okay :D

@n0toose > or uploading large amounts of copyrighted Sounds if uploading small amounts of copyrighted material is okay :D
Author
Contributor

I had private repositories in mind - for people that own the rights to the content they upload. Should I still fix this?

I had private repositories in mind - for people that own the rights to the content they upload. Should I still fix this?
First-time contributor

Then we have three cases to consider:

  • (a) small, private repositories of copyrighted, non-free material (allowed up to 100 MiB or such, idk the exact number as it isn't stated in ToU yet)
  • (b) public repositories of with small amounts of copyrighted, non-free material are disallowed by default. reasonable exceptions can be granted, but require asking for consent from Codeberg.
  • (c) public repositories of large amounts of copyrighted, non-free material are afaik never okay.
Then we have three cases to consider: * (a) small, private repositories of copyrighted, non-free material (allowed up to 100 MiB or such, idk the exact number as it isn't stated in ToU yet) * (b) public repositories of with small amounts of copyrighted, non-free material are disallowed by default. reasonable exceptions can be granted, but require asking for consent from Codeberg. * (c) public repositories of large amounts of copyrighted, non-free material are afaik never okay.
Author
Contributor

The registration page is not an authoritative source to outline our policies, the Terms of Use page is. Just because we mention we'd nuke remove types of accounts on sight, doesn't mean that we are violating any promise by e.g. removing sexist content immediately. If we start getting lots of sexists, it might make sense to add it later.

We should not mention all three cases there. I focused on mentioning common abuse vectors that will 100% get you banned. We should not scare people that might have plans for less clear-cut cases (e.g. proprietary blobs for Linux on Mobile development or lecture notes + actual open-source work) away.

The registration page is not an authoritative source to outline our policies, the Terms of Use page is. Just because we mention we'd nuke remove types of accounts on sight, doesn't mean that we are violating any promise by e.g. removing sexist content immediately. If we start getting lots of sexists, it might make sense to add it later. We should not mention *all* three cases there. I focused on mentioning common abuse vectors that will 100% get you banned. We **should not** scare people that might have plans for less clear-cut cases (e.g. proprietary blobs for Linux on Mobile development or lecture notes + actual open-source work) away.
Owner

Phew, well, +1 for the links, but my annoying space-using uppercase easy to see keywords had its reason.
There were mutiple chinese accounts registering per day, using codeberg as a storage to iptv links (in some repos called tvbox mostly). I wanted to explicitly make them understand that they are not welcome here, as to me it seems they are in fact not aware of that fact.

Phew, well, +1 for the links, but my annoying space-using uppercase easy to see keywords had its reason. There were mutiple chinese accounts registering per day, using codeberg as a storage to iptv links (in some repos called tvbox mostly). I wanted to explicitly make them understand that they are not welcome here, as to me it seems they are in fact *not aware* of that fact.
Owner

@ashimokawa Do you think your warning had any impact? Did you measure it?

I agree it looks far from professional and I would like to have it removed or changed to look as if we're a serious place.

@ashimokawa Do you think your warning had any impact? Did you measure it? I agree it looks far from professional and I would like to have it removed or changed to look as if we're a serious place.
Owner

@fnetX

It seems to me that there a lot less new number@qq accounts creating tvbox repos.
Also in the past some complained after removal.
Making clear that we do not want it is good imo.

Also I don't think it looks THAT bad.

@fnetX It seems to me that there a lot less new number@qq accounts creating tvbox repos. Also in the past some complained after removal. Making clear that we do not want it is good imo. Also I don't think it looks THAT bad.
Author
Contributor

Making clear that we do not want it is good imo.

Okay, I didn't know that there was a measurable impact - but I tried to account for the possibility that there's background context I was not aware of.

Also I don't think it looks THAT bad.

I disagree, it looks as if we, the faceless administrators-deities, are screaming to everyone attempting to make an account - it may have an effect towards the primary audience of the warning (which is very good!), but it has an unintended effect towards the primary audience of Codeberg and its community (which is room for improvement). That's why I'm trying to improve it.

Do you think that we should try and see whether my adjustments will have an impact on the reduction?

> Making clear that we do not want it is good imo. Okay, I didn't know that there was a measurable impact - but I tried to account for the possibility that there's background context I was not aware of. > Also I don't think it looks THAT bad. I disagree, it looks as if we, the faceless administrators-deities, are screaming to everyone attempting to make an account - it may have an effect towards the primary audience of the warning (which is very good!), but it has an unintended effect towards the primary audience of Codeberg and its community (which is room for improvement). That's why I'm trying to improve it. Do you think that we should try and see whether my adjustments will have an impact on the reduction?
n0toose force-pushed n0toose/ui-registration-consent from 100d44b5db to 8efcd326fd 2025-07-14 16:32:20 +02:00 Compare
n0toose force-pushed n0toose/ui-registration-consent from 8efcd326fd to 88cc15422c 2025-07-14 16:39:29 +02:00 Compare
ashimokawa approved these changes 2025-07-14 18:24:22 +02:00
Dismissed
ashimokawa left a comment
Owner

looks good to me now

looks good to me now
mahlzahn approved these changes 2025-07-14 18:33:03 +02:00
fogti approved these changes 2025-07-14 18:57:39 +02:00
Owner

@n0toose wrote in #108 (comment):

Inform people about the ToU and Privacy Policy.

Just to make sure this was considered, is this message good enough if people register via OAuth2?

@n0toose wrote in https://codeberg.org/Codeberg-Infrastructure/forgejo/pulls/108#issue-1932596: > Inform people about the ToU and Privacy Policy. Just to make sure this was considered, is this message good enough if people register via OAuth2?
Author
Contributor

@Gusted This should be added to the Sign in page as well then.

@Gusted This should be added to the Sign in page as well then.
Owner

@n0toose

Would you do it and then we merge? I do not think we need the extra warning there though.

@n0toose Would you do it and then we merge? I do not think we need the extra warning there though.
n0toose force-pushed n0toose/ui-registration-consent from 88cc15422c to 6c8bdb6678 2025-07-15 23:15:13 +02:00 Compare
Author
Contributor

@ashimokawa i pushed something - but be careful, I didn't manage to test the sign-in page locally yet.

@ashimokawa i pushed something - but be careful, I didn't manage to test the sign-in page locally yet.
Author
Contributor

I didn't manage to test the sign-in page locally yet

I'm having some i18n-related difficulties with reproduction, so I'd appreciate some assistance here if possible.

> I didn't manage to test the sign-in page locally yet I'm having some i18n-related difficulties with reproduction, so I'd appreciate some assistance here if possible.
fnetX removed review requests for caesar, crystal 2025-07-16 13:49:01 +02:00
Owner

What are "i18n-related difficulties with reproduction"?

What are "i18n-related difficulties with reproduction"?
Author
Contributor

Sorry - Andreas asked me in private and I answered that to him, but TL;DR no matter what I do, my local Forgejo build of Codeberg's soft-fork seems to think that no translations exist under any circumstances.

The previous screenshot was a result of a manual copy-paste of a template onto the actual Forgejo tree.

Sorry - Andreas asked me in private and I answered that to him, but TL;DR no matter what I do, my local Forgejo build of Codeberg's soft-fork seems to think that no translations exist under any circumstances. The previous screenshot was a result of a manual copy-paste of a template onto the actual Forgejo tree.
Owner

Codeberg-specific patches have never been translated. Why do you try to deal with translations in the first place?

Codeberg-specific patches have never been translated. Why do you try to deal with translations in the first place?
First-time contributor

If possible, I think it would be nice to have a translation for that, especially because it sets user expectations.

If possible, I think it would be nice to have a translation for that, especially because it sets user expectations.
Author
Contributor

Codeberg-specific patches have never been translated. Why do you try to deal with translations in the first place?

OK, I was missing a make clean.

image

image

In the second screenshot, one can see the same box twice when clicking on the "Sign in with..." menu. I'm not sure if that's a problem.

> Codeberg-specific patches have never been translated. Why do you try to deal with translations in the first place? OK, I was missing a `make clean`. ![image](/attachments/f82cc97f-a930-41bf-b99c-3021524a6124) ![image](/attachments/d30892a1-707b-4ed9-b8b0-d1f458fe13e8) In the second screenshot, one can see the same box twice when clicking on the "Sign in with..." menu. I'm not sure if that's a problem.
104 KiB
128 KiB
First-time contributor

I think you might be able to hide the second one using CSS, and CSS classes. It would however require that you give them different id='s anyways (otherwise it's invalid HTML).

I think you might be able to hide the second one using CSS, and CSS classes. It would however require that you give them different `id=`'s anyways (otherwise it's invalid HTML).
Author
Contributor
  • Properly clean solutions should be done upstream instead. This is to address a need.
  • I don't think this is a massive problem.
  • I think there are other factors, such as the CAPTCHA warnings, which should be improved/fixed as well.

If this is not a problem, I propose we proceed as-is for now.

- Properly clean solutions should be done upstream instead. This is to address a need. - I don't think this is a massive problem. - I think there are other factors, such as the CAPTCHA warnings, which should be improved/fixed as well. If this is not a problem, I propose we proceed as-is for now.
ashimokawa approved these changes 2025-10-10 23:28:09 +02:00
ashimokawa merged commit 26d42cb62a into codeberg-11 2025-10-10 23:28:30 +02:00
Owner

@ashimokawa Please note that you merged this into codeberg-11, while we are deploying codeberg-12.

@ashimokawa Please note that you merged this into codeberg-11, while we are deploying codeberg-12.
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
6 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Codeberg-Infrastructure/forgejo!108
No description provided.