DrewHintz

16 ms·

1. 91.▲
   by DrewHintz 17y ago

   http://spritegen.website-performance.org/ is similar. It has you upload a zip of your images and I think it gives you a bit more control over the sprited image it creates.
2. 92.▲
   by DrewHintz 17y ago

   And then what happens when the server with your cache dies? :)
3. 93.▲
   by DrewHintz 17y ago

   Reporting a bug through their bug report form worked. :) FriendFeed has fixed the bug. There was a way to exploit this now-fixed issue as actual XSS in FriendFeed for certain browsers. http://code.google.com/p/browsersec/wiki/Part2#Content
4. 94.▲
   by DrewHintz 17y ago

   As pointed out here and in the blog's comments, if example.com does a <script src=" http://friendfeed.com/api/feed/public?callback=alert%28docum... the code will run in example.com's origin, not friendfeed.com's. This means it's not an