Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Great tool for posting HTML/CSS/JS examples online

jsfiddle.net

Post reply on HN
Print view View original

1–10 of 19 posts

Re: Great tool for posting HTML/CSS/JS examples online

#3

Post by mckoss »

oniTony wrote: post #2

This seems pretty amazing, but I guess there's no way around letting users work on arbitrary JavaScript and XSS? http://jsfiddle.net/wk7sK/

They could put all executed code in a cookie-less domain, that way it can't access any private resources on your behalf (modulo XSS bugs on other sites). This is what the Google code playground does:

http://code.google.com/apis/ajax/playground/

Re: Great tool for posting HTML/CSS/JS examples online

#4

Post by cleverjake »

mckoss wrote: post #3
oniTony wrote: post #2

This seems pretty amazing, but I guess there's no way around letting users work on arbitrary JavaScript and XSS? http://jsfiddle.net/wk7sK/

They could put all executed code in a cookie-less domain, that way it can't access any private resources on your behalf (modulo XSS bugs on other sites). This is what the Google code playground does: http://code.google.com/apis/ajax/playground/

Man, I have never seen the code playground before. This makes using their APIs so much easier. Thanks man

Re: Great tool for posting HTML/CSS/JS examples online

#7

Post by Groxx »

Yansky wrote: post #6

What does it mean by "normalized CSS"?

From here: http://doc.jsfiddle.net/api/post.html?highlight=normalized, given this:

>normalize_css: yes or no - should normalize.css be loaded before any CSS declarations?

I'm guessing it's an external CSS file, probably to enforce consistency between browsers. Haven't looked at it, though - just assuming. "normalize" is nowhere else in the documentation, oddly enough.

Re: Great tool for posting HTML/CSS/JS examples online

#8

Post by hammerdr »

Groxx wrote: post #7
Yansky wrote: post #6

What does it mean by "normalized CSS"?

From here: http://doc.jsfiddle.net/api/post.html?highlight=normalized , given this: > normalize_css: yes or no - should normalize.css be loaded before any CSS declarations? I'm guessing it's an external CSS file, probably to enforce consistency between browsers. Haven't looked at it, though - just assuming. "normalize" is nowhere else in the documentation, oddly enough.

It's a simple reset.css

http://fiddle.jshell.net/css/normalize.css

Post reply on HN