5 ms·
Back in the day I used LiveConnect[1] for this and other purposes[2]. I would dump errors to an IRC server so that I could collect the results. I could also res
by geocar 9y ago
Back in the day I used LiveConnect[1] for this and other purposes[2]. I would dump errors to an IRC server so that I could collect the results. I could also respond with code that would be eval'd making development very easy.
[1]: https://developer.mozilla.org/en-US/docs/Archive/Web/LiveConnect https://developer.mozilla.org/en-US/docs/Archive/Web/LiveCon...
[2]: http://geocar.sdf1.org/ajaj.html http://geocar.sdf1.org/ajaj.html
- tonyarkles 9y ago> I could also respond with code that would be eval'd making development very easy In dev only, I hope?! I honestly love the idea as a super fun hack, but the security implications for prod are terrifying.
- geocar 9y agoNot sure there was much risk: The web application used a private IRC server with name+password registered users. L3 support who /msg'd a user session some JavaScript doesn't seem likely as the messages were all logged, and anyone with fileserver access could just put whatever they want in the <script> tag anyway...