News for hackers. Stuff that matters.

A comment on WorldChat.io: Chat with realtime translation.

Re:WorldChat.io: Chat with realtime translation by anonfunction on Tuesday May 21, 2013 @02:12PM (#5745551)
Since I made this, I'm glad some people like it (and not surprised some don't) but I'd love to answer some technical questions or hear any bugs / issues / security holes you hackers might have found. Cheers!
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by C1D on Tuesday May 21, 2013 @02:16PM (#5745584)
It feels like I'm being spammed, there isn't enough time to read the messages and its also getting flooded by people with the usernames flood and flooder.
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by anonfunction on Tuesday May 21, 2013 @02:17PM (#5745596)
Ya, I tried to implement rate limiting and failed, this was last night at 3am, so let me try again. If you code you might be able to beat me to it: https://github.com/Mashape/worldchat
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by C1D on Tuesday May 21, 2013 @10:30PM (#5748473)
I'm going out but when I get home I will see what I can do :) EDIT: I think using websockets + node.js would be a better idea.
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by johnernaut on Tuesday May 21, 2013 @02:14PM (#5745570)
JavaScript in the body of the message box executes 0.o very cool none-the-less.
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by anonfunction on Tuesday May 21, 2013 @02:18PM (#5745602)
Only for you, it gets filtered before going over the wire. Have fun :)
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by octatone2 on Tuesday May 21, 2013 @02:47PM (#5745855)
Should still be sanitizing user input, there's no reason to be passing the message as an html variable in handlebars {{{message}}} :/

You trust your server-side sanitization that much?

[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by sk00byd00 on Tuesday May 21, 2013 @03:22PM (#5746133)
Do you trust the client side at all?
[ Parent | on HN ]
Re:WorldChat.io: Chat with realtime translation by octatone2 on Tuesday May 21, 2013 @03:37PM (#5746285)
I trust handlebars with all my user inputs.
[ Parent | on HN ]