News for hackers. Stuff that matters.
Re:Show HN: 100% offline Shamir's Secret Sharing GUI by blitmap on Wednesday June 17, 2020 @02:22AM (#23548376)
Are you saying JS could modify the CSP policy or meta tag after page load?

Suddenly I'm thinking it would be very cool to be able to right-click on a tab and say 'Take Tab Offline' Imagine if it was like a toggle on the tab itself like muting sound from a tab. It would instruct the browser to isolate the tab/process from the network? I'm not sure how Web Workers play into this.

Re:Show HN: 100% offline Shamir's Secret Sharing GUI by dylz on Wednesday June 17, 2020 @03:25AM (#23548767)
You have no guarantee that the server won't just "if (ip === companyName) { don't serve CSP + serve infiltrated JS }" in the future.
Re:Show HN: 100% offline Shamir's Secret Sharing GUI by blitmap on Wednesday June 17, 2020 @04:57PM (#23556658)
I mean you could absolutely inspect the source for the page, but these things could be modified at runtime by JS, right?

I'm talking about the meta tags. It would be neat to have a toggle on the tab for isolating the content of the page from the network.

Re:Show HN: 100% offline Shamir's Secret Sharing GUI by ijpsud on Friday June 19, 2020 @12:33PM (#23576052)
You'd have to restrict localstorage and stuff like that too, else they could save data and then send it when they regain network access.

If you have a use-case, or some ideas, there's Chrome bug page for "offline-only PWAs": https://bugs.chromium.org/p/chromium/issues/detail?id=995236