3 ms·
This seems pretty amazing, but I guess there's no way around letting users work on arbitrary JavaScript and XSS? http://jsfiddle.net/wk7sK/ http://jsfiddle.net/
by oniTony 16y ago
This seems pretty amazing, but I guess there's no way around letting users work on arbitrary JavaScript and XSS? http://jsfiddle.net/wk7sK/ http://jsfiddle.net/wk7sK/
- mckoss 16y agoThey could put all executed code in a cookie-less domain, that way it can't access any private resources on your behalf (modulo XSS bugs on other sites). This is what the Google code playground does: http://code.google.com/apis/ajax/playground/ http://code.google.com/apis/ajax/playground/
- cleverjake 16y agoMan, I have never seen the code playground before. This makes using their APIs so much easier. Thanks man
- zalun 16y agoThey use the same editor engine
- zalun 16y agoWe use different domain for displaying fiddles.