4 ms·
It is pretty cool that we have browser features like this to rely on. I remember writing code in the bad old days to parse HTML tags and allowlist specific att
by jacobgold 4mo ago
It is pretty cool that we have browser features like this to rely on.
I remember writing code in the bad old days to parse HTML tags and allowlist specific attributes. Now browsers have a much better solution baked in.
But it still makes me a bit nervous. Seems like a very small bug could sneak in. This is a good example of where I would reach for Fable to double check the implementation and have a lot of extra tests.
(nit: would be nice if the chat box treated Enter and Shift+Enter the way these other companies have trained my brain, but maybe that is a deliberate choice.)
- simonw 4mo agoIn the three short days we had access to Fable I did have it run a review, and it spotted an issue for me to fix. Thankfully GPT-5.5 is really strong on security stuff too. I wouldn't have dared build this without a whole lot of Opus/GPT-assisted prototyping and testing along the way.