Live data from Hacker News

Show HN: ChromeREPL, Interact with Chrome from Sublime Text

github.com

11–18 of 18 posts

Re: Show HN: ChromeREPL, Interact with Chrome from Sublime Text

#12
post #2

This looks very useful, but it does concern me that this is even possible. Simply starting chrome with a `--remote-debug` flag allows you to run JavaScript in any tab? seems like it could easily be exploited somehow; read passwords, copy userinfo etc.

Remember that if you have access to run a shell command, you have access to rm -rf /*.

Re: Show HN: ChromeREPL, Interact with Chrome from Sublime Text

#13
While this looks awesome, it runs really slow for me. From sending a command in Sublime to the actual execution, it takes me > 1s. This is on Windows 10, Sublime Text 3, Chrome 66.

EDIT: if I install chromeREPL, it takes ages to open the command palette (CTL+Shift+P). If I uninstall it, the problem disappears.

Re: Show HN: ChromeREPL, Interact with Chrome from Sublime Text

#15

Is there something similar for Firefox?

There used to be MozREPL: https://github.com/bard/mozrepl but it never made it over the webextension/quantum changeover.

I haven't yet found a replacement, although I haven't been looking very hard recently.

Re: Show HN: ChromeREPL, Interact with Chrome from Sublime Text

#18
post #12
post #2

This looks very useful, but it does concern me that this is even possible. Simply starting chrome with a `--remote-debug` flag allows you to run JavaScript in any tab? seems like it could easily be exploited somehow; read passwords, copy userinfo etc.

Remember that if you have access to run a shell command, you have access to rm -rf /*.

Yes true, the chrome flags are the least of your problems then!
Post reply on HN