News for hackers. Stuff that matters.

A comment on Filepicker.io (YC S12) lets content flow without worrying about bandwidth. Parent comment

Re:Filepicker.io (YC S12) lets content flow without worrying... by JoshTriplett on Friday August 17, 2012 @07:00PM (#4399272)
I understand the motivation; that doesn't make it acceptable for all sites, especially sites that care about minimizing their vulnerability surface. And since browsers don't currently have any security model for third-party scripts other than "full capabilities of the site that loads them", third-party scripts significantly increase the vulnerability surface of a site.

If browsers had a way to let third-party scripts run in a sandbox separate from the site, so that (for instance) filepicker.io can help with file uploads without having the full permissions of the logged-in users on every site that uses it, I'd have much less objection to third-party scripts.

[ Parent | on HN ]
Re:Filepicker.io (YC S12) lets content flow without worrying... by theotherone on Friday August 17, 2012 @08:51PM (#4399700)
You can run their scripts in an iframe, e.g.:

http://www.daemonology.net/blog/2012-08-13-tarsnap-credit-ca...

[ Parent | on HN ]
Re:Filepicker.io (YC S12) lets content flow without worrying... by JoshTriplett on Friday August 17, 2012 @09:49PM (#4399871)
Yeah, I normally do that when dealing with APIs that want to use third-party scripts. I'd just like to see more APIs that support running with local versions of the scripts, to avoid the need for a separate untrusted domain.
[ Parent | on HN ]