kid-icarus

3 ms·

1. 1.▲
   by kid-icarus 4y ago

   While these points may hold true, I’ve often seen the statement thrown around in chats and various forums that, “dart sux.” I don’t understand the hate, nor the juvenile phrasing.
2. 2.▲
   by kid-icarus 5y ago

   Yes, if an extension can override CSP directives to allow arbitrary connect-src exceptions, it effectively means that any data in any form on any page is now susceptible of having that data sent to an attacker-owned URL. The solution doesn&
3. 3.▲
   by kid-icarus 5y ago

   I have that same issue, but I would much rather filter out extraneous CSP violations than have some exploited extension exfiltrate sensitive data. Edit: typo
4. 4.▲
   by kid-icarus 5y ago

   Can you specify which policies are a nightmare to develop on? As a security-minded UI eng, I warmly welcome any new security policies that enable me to harden my applications and prevent exfiltration of sensitive data. Edit: typo.
5. 5.▲
   by kid-icarus 6y ago

   I don't know how many of the cursed sites you've visited, but in addition to rudimentary styling, some of the sites contain some rather disturbing content. Hence the "fucked up shit," and "twisted mind," commen
6. 6.▲
   by kid-icarus 6y ago

   Respectfully disagree. I take delight in observing these artifacts, it's unfortunate you cannot.