5 ms·
I like this. It's very accessible. Could you consider adding a delete button? Also, you are currently able to rename the example box. Perhaps you should disabl
by thedjinn 15y ago
I like this. It's very accessible.
Could you consider adding a delete button? Also, you are currently able to rename the example box. Perhaps you should disable that.
- guynamedloren 15y agoThanks! I am aware that you can rename the example box, and that's okay. The button on the home screen should still be able to find it :) I thought about deleting, but it could get messy if somebody decides to delete all the files as there are no permissions/accounts etc. Maybe in the future, if I decide to build on this?
- thedjinn 15y agoAlso, you should patch up the XSS vulnerabilities in the box name. ;)
- SaltwaterC 15y agoEven more, one could rename the default 'example' page like this: http://boxify.me/box/input-script-alert-string-fromcharcode-88-83-83-script http://boxify.me/box/input-script-alert-string-fromcharcode-... :) Edit: removed the XSS, but here's the vector (if HN allows: input"><script>alert(String.fromCharCode(88,83,83))</script>)
- guynamedloren 15y agoThanks for pointing those out, fellas. Should be all fixed now. :)