5 ms·
The article says CSP seven times in the first two paragraphs without saying what it stands for; it would be much more readable if they did. (It stands for conte
by jaredsohn 10y ago
The article says CSP seven times in the first two paragraphs without saying what it stands for; it would be much more readable if they did. (It stands for content security policy for those wondering.)
- wsh91 10y agoTo that end, it might be worth spelling out in the title here. I got my hopes up thinking it was about https://en.wikipedia.org/wiki/Communicating_sequential_processes https://en.wikipedia.org/wiki/Communicating_sequential_proce....
- sethammons 10y agoDitto
- ptoomey3 10y agoApologies for that not being clear. Given I had linked to the original article in the first sentence, I took the perspective of people knowing which "CSP" I was talking about. I'll update the post in the morning to spell/link out to the first CSP reference.
- skrebbel 10y agoIf you ever have a post-Communicating Sequential Processes journey at GitHub, please do write a post! Most people I know are moving to something CSP based (say, Go channels) so it would be very cool to understand why someone would consciously decide to ditch the concept again, after a serious engineering effort.
- ptoomey3 10y agoI've updated the post to spell out/link to a description of CSP upon first mention.
- ptoomey3 10y agoFunny enough, I tried doing exactly that when I submitted the post to HN this morning: https://news.ycombinator.com/item?id=13437920 https://news.ycombinator.com/item?id=13437920. But, unfortunately, my submission wasn't the one to make the front page .
- deleted 10y ago[deleted]
- rbritton 10y agoThere's even a tag for it: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/abbr https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ab...
- deleted 10y ago[deleted]
- dfc 10y agoAt a certain point you need to set a baseline expectation of your audience in order to communicate effectively. Do you think they should also explain exploitation, img-src, the mechanics of parsing unmatched quotes, javascript or CSRF? The target audience of the article knows what CSP stands for and most likely has been reading the other entries along this journey.
- Ericson2314 10y agoAnd I had thought it was communicating sequential processes for a second
- rcfox 10y agoI was hoping it meant "constraint-satisfaction programming".
- rcfox 10y agoI would expect them to expect their readers to look up concepts that are unfamiliar. Throwing around overloaded acronyms without definition makes that difficult.
- tlrobinson 10y agoAnecdotally, I was aware of both Content Security Policy and Communicating Sequencial Processes, and first thought of the latter. I figured it out by the end of the first paragraph though.
- lubomir 10y agoAnd then there's also Constraint Satisfaction Problem.
- peteretep 10y agoYou are getting downvoted because in complaining we are below your technical baseline, you've ironically revealed you're not familiar with the rather more interesting CSP.
- db48x 10y agoHeh, I was slightly confused at first, then very confused when I got to "post-CSP exploitation". Trying to come up with a plausible meaning for that phrase is an interesting exercize.
- davidgrenier 10y agoWell, I certainly upvoted a bunch of people here.
- sb8244 10y agoThe first sentence is a link to a blog post with an in depth introduction to what they are talking about. No child comment on here seems to have pointed it out. Surely that is acceptable considering the level of detail they go into in their original post?
- ChoGGi 10y agoWell, it's obviously the Canadian Ski Patrol.