News for hackers. Stuff that matters.
Re:Show HN: A simple blogging platform I built out of frustr... by freehrtradical on Sunday May 23, 2021 @09:23AM (#27254846)
> You can edit templates directly in the browser

Do the templates contain code?

WordPress used to have a feature to edit PHP plugin code through the browser and it was a security nightmare. If you allow code editing, I suggest disabling it by default and when an attempt is made to enable it, send an email to the site admin to confirm before enabling.

Re:Show HN: A simple blogging platform I built out of frustr... by SkyLinx on Sunday May 23, 2021 @09:25AM (#27254854)
Hi! The templates use Liquid, a very simple but powerful markup language based on HTML. It takes a few minutes to learn! It's the same markup used by Shopify - they created it https://shopify.github.io/liquid/

It's very safe though, it cannot execute harmful code :)