keinplan

3 ms·

1. 1.▲
   by keinplan 5y ago

   Remote-code-execution as a feature just isn't a good idea. Sandboxes can (and Murphy's Law says they will) be broken out of. There are many documented browser-exploits and basically all newer ones that are actually a danger to use
2. 2.▲
   by keinplan 5y ago

   I also think that Twine/Client-Side-JS isn't the worst choice here. It takes unnecessary load from the server and is easy to use, at least for the one creating the game. It's just so frustrating to watch how having loads of J
3. 3.▲
   by keinplan 5y ago

   > Just wish I can only give authorization to certain JS api. This is already implemented in any browser I know, but for some reason it is available only to some functionality (microphone, camera etc.) but not for eg. Ajax, Cross-Origin T
4. 4.▲
   by keinplan 5y ago

   Thats what cookies are for.