News for hackers. Stuff that matters.

A comment on Show HN: Worldle- 24 Hour real time boggle HTML5 hackathon game. Parent comment

Re:Show HN: Worldle- 24 Hour real time boggle HTML5 hackatho... by nulluk on Saturday March 24, 2012 @03:08PM (#3750371)
So far there has been several GIF's embedded. An alert for your document.cookie, and a redirect to another gif. You can safely say it's not escaping the HTML input on the leader board.

Also the matching words shouldn't be passed to the client, keep as much data server side as possible to elevate some of the cheating, your never going to stop all of it but that should deter most people.

All in all though kudos, looks a decent outcome for a hack project.

[ Parent | on HN ]
Re:Show HN: Worldle- 24 Hour real time boggle HTML5 hackatho... by kunil on Sunday March 25, 2012 @08:42AM (#3752425)
"the matching words shouldn't be passed to the client, keep as much data server side" Communication cost between clients and server would be too high I guess. Also you would notice the delay between entering a word and getting the reply from the server.
[ Parent | on HN ]
Re:Show HN: Worldle- 24 Hour real time boggle HTML5 hackatho... by farhadabas on Saturday March 24, 2012 @03:46PM (#3750490)
Sorry for the problems- tried fixing some of them. Hope you enjoy it!
[ Parent | on HN ]
Re:Show HN: Worldle- 24 Hour real time boggle HTML5 hackatho... by nyellin on Saturday March 24, 2012 @04:37PM (#3750636)
Someone is injecting a flash script into the background.

Edit: You might want to change the page's title. Also, thanks for the game. I really enjoyed it.

[ Parent | on HN ]
Re:Show HN: Worldle- 24 Hour real time boggle HTML5 hackatho... by heretohelp on Saturday March 24, 2012 @11:39PM (#3751634)
alleviate, not elevate.
[ Parent | on HN ]