This is awesome. You may want to add a linkify script to turn URLs into clickable anchors.
Fluin: Like a cross between IM and a Forum
31–40 of 42 posts
Re: Fluin: Like a cross between IM and a Forum
#32"I wish I could anchor the page to one comment, prevent it from scrolling." - anon
If the mouse has focus on a post, it should stop the scrolling. (roll over or input selected)
Also, I think there should be a timer to auto hide comments from a root node, so only recent posts show the nested trail. This will stop the page from getting giganto
Re: Fluin: Like a cross between IM and a Forum
#33I really like it! I think it has some potential.
agreed, just asked a question, got a reply almost immediately.
Re: Fluin: Like a cross between IM and a Forum
#34love the idea. lots of fun. a few usability ideas:
-make hyperlinks clickable.
-the top menu bar is hard to click -- make the surrounding whitespace clickable as well.
-on http://metal.fluin.com/, if I click the black large font text on a list item, it should expand the thread all ajaxy.
-give anonymous users names like "user14232" or gravatars so we can see conversation threads/replies. no-register account! track them with cookies, it's ok. some people will get riled up, but not your users, because they'll think it's fun.
Re: Fluin: Like a cross between IM and a Forum
#35Now someone needs to write a script to compare the writing style in the posts to the writing style of hackernews commentors and reveal who is who. :)
[Also take into consideration any comments on gender, location, time, etc.]
Re: Fluin: Like a cross between IM and a Forum
#36love the idea. lots of fun. a few usability ideas: -make hyperlinks clickable. -the top menu bar is hard to click -- make the surrounding whitespace clickable as well. -on http://metal.fluin.com/ , if I click the black large font text on a list item, it should expand the thread all ajaxy. -give anonymous users names like "user14232" or gravatars so we can see conversation threads/replies. no-register account! track t…
Making hyperlinks easily clickable will overrun the site with spam.
Re: Fluin: Like a cross between IM and a Forum
#37love the idea. lots of fun. a few usability ideas: -make hyperlinks clickable. -the top menu bar is hard to click -- make the surrounding whitespace clickable as well. -on http://metal.fluin.com/ , if I click the black large font text on a list item, it should expand the thread all ajaxy. -give anonymous users names like "user14232" or gravatars so we can see conversation threads/replies. no-register account! track t…
Making hyperlinks easily clickable will overrun the site with spam.
Good point. You can blacklist ips, perhaps.
Re: Fluin: Like a cross between IM and a Forum
#38Re: Fluin: Like a cross between IM and a Forum
#39http://fluin.com/?search=%22%3E%3Cscript%3Ealert%28%27XSS%27... A little security flaw ;)
This one is fixed :)
It actually isn't. This example won't execute on page load, but it will if someone clicks in the search box.
http://fluin.com/?search=Search%22%20onclick=alert%28documen...
Since you're using PHP, I recommend you use a function like htmlspecialchars here rather than whatever kind of filtering you're doing.
Re: Fluin: Like a cross between IM and a Forum
#40Earlier quoted context omitted.
It does. If you look closely, you'll see that HN's URL parser ignored the ] at the end of the URL. If you click on the URL and then add a ] to the end of it, your JSON will be valid and you'll see two alert boxes. Edit: But yeah, my bad for not noticing that earlier. I've swapped it out for a bit.ly link now, so it works properly. I'm headed to sleep. :)
It shouldn't affect the feed though (at least it doesn't seem like it)
That isn't the goal of an XSS attack. :P