4 ms·
This is why GitHub uses a separate domain (github.io as opposed to github.com) for user sites.
by Uehreka 8y ago
This is why GitHub uses a separate domain (github.io as opposed to github.com) for user sites.
- floil 8y agoMoreover, github.io is in the public suffix list, so it is effectively a TLD (foo.github.io is a different site from bar.github.io; they can't become same origin by means of document.domain). The risk of eval() is giving control of the site data of foo.github.io to the author of a stackoverflow comment. The warning is part of the fun, though.
- _puk 8y agoGithub hasn't always used a seperate domain for user sites [0]. They do now to directly address the GP's concerns. http://homakov.blogspot.com/2013/03/hacking-github-with-webkit.html http://homakov.blogspot.com/2013/03/hacking-github-with-webk...