News for hackers. Stuff that matters.

A comment on Let's make GitHub better, together. Parent comment

Re:Let's make GitHub better, together by shabble on Friday December 07, 2012 @11:57AM (#4887828)
Sites that allow users [to have significant control over] personalised subdomains are also problematic for things like NoScript and other whitelisting tools. Since I have github.com permitted, all the subdomains inherit that permission.

I'm not even sure what a good model/UI would be to selectively white/blacklist subdomains.

[ Parent | on HN ]
Re:Let's make GitHub better, together by alter8 on Sunday December 09, 2012 @07:11PM (#4896785)
That is a problem only because Github uses the root domain for its own pages. They could rather use www.github.com.

To solve your case on NoScript, whitelist the full address https://github.com/ and that will keep http subdomains out.

[ Parent | on HN ]
Re:Let's make GitHub better, together by gsiener on Friday December 07, 2012 @03:23PM (#4889065)
Maybe github should use a different TLD for pages? Like Githubpages.com ?
[ Parent | on HN ]