Live data from Hacker News

Show HN: I made a platform to publish my Google Docs files as blogs

hexo.press

1–10 of 56 posts

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#3
Congratulation on shipping! The experience was flawless and quick.

Two things I noticed which I hope you will consider fixing:

- It was trivially easy to expose the user's google/gmail address by typing in a random URL within the user's blog. The 404 page exposes the user's email address. [0] Probably better to have some UUID-email mapping that is secret.

- When I clicked "Delete Account/Blog", the application did not remove itself from Google's "Apps with access to your account" page and was still showing up as an active integration.

[0]: https://i.imgur.com/PG8Em4S.png

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#4
post #2

Curious if you'll be affected by "Google Docs will now use canvas based rendering" . https://workspaceupdates.googleblog.com/2021/05/Google-Docs-... Discussed yesterday: https://news.ycombinator.com/item?id=27129858

Author here! :) No it won't. I was the one who submitted that piece to HN, and the first thing I was worried was how it will break hexo.press.

Apparently, only extensions are affected and hexo.press is a service that uses Google's meta APIs, which are not affected.

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#5
post #3

Congratulation on shipping! The experience was flawless and quick. Two things I noticed which I hope you will consider fixing: - It was trivially easy to expose the user's google/gmail address by typing in a random URL within the user's blog. The 404 page exposes the user's email address. [0] Probably better to have some UUID-email mapping that is secret. - When I clicked "Delete Account/Blog", the application did no…

Thank you for pointing this out.

#1 - I'll deactivate debug mode ASAP and the 404 page shouldn't have any extra info henceforth.

#2 - Yes, it's better to revoke google's scopes as well. I'll work on this one.

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#6
post #3

Congratulation on shipping! The experience was flawless and quick. Two things I noticed which I hope you will consider fixing: - It was trivially easy to expose the user's google/gmail address by typing in a random URL within the user's blog. The 404 page exposes the user's email address. [0] Probably better to have some UUID-email mapping that is secret. - When I clicked "Delete Account/Blog", the application did no…

> It was trivially easy to expose the user's google/gmail address by typing in a random URL within the user's blog.

This one is fixed now!

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#7
post #5
post #3

Congratulation on shipping! The experience was flawless and quick. Two things I noticed which I hope you will consider fixing: - It was trivially easy to expose the user's google/gmail address by typing in a random URL within the user's blog. The 404 page exposes the user's email address. [0] Probably better to have some UUID-email mapping that is secret. - When I clicked "Delete Account/Blog", the application did no…

Thank you for pointing this out. #1 - I'll deactivate debug mode ASAP and the 404 page shouldn't have any extra info henceforth. #2 - Yes, it's better to revoke google's scopes as well. I'll work on this one.

Django debug is quite dangerous to expose online. Are you hosting this on your own computers?

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#8
post #2

Curious if you'll be affected by "Google Docs will now use canvas based rendering" . https://workspaceupdates.googleblog.com/2021/05/Google-Docs-... Discussed yesterday: https://news.ycombinator.com/item?id=27129858

From looking at the code, I think it's basically just downloading the relevant google docs files as docx (or markdown if the file's just .md) and converting it into octopress, so I don't think it will matter.

Source: https://github.com/joelewis/hexopress/blob/55f55c39136ef301f...

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#9
I went to the GitHub repo you included at the bottom of the page and I noticed you don’t include a license. Without a license everyone who clones, forks, or otherwise uses you code is violating your copyright. Maybe that’s your intention, but if not you should consider adding an appropriate license that defines what use of your code is and isn’t allowed.

Re: Show HN: I made a platform to publish my Google Docs files as blogs

#10
post #2

Curious if you'll be affected by "Google Docs will now use canvas based rendering" . https://workspaceupdates.googleblog.com/2021/05/Google-Docs-... Discussed yesterday: https://news.ycombinator.com/item?id=27129858

From looking at the code, I think it's basically just downloading the relevant google docs files as docx (or markdown if the file's just .md) and converting it into octopress, so I don't think it will matter. Source: https://github.com/joelewis/hexopress/blob/55f55c39136ef301f...

This comment caught my eye because I use a lot of markdown. What do you mean about downloading the file as markdown if it's just an .md?

I haven't ever created a .md in Google Docs and I don't see a way to download one.

Edit: After looking at the code, I think the comment applies to Google Drive and not Google Docs. I only use Google Drive via the web interface and it's a bit of a pain to "create" an md file via that interface.

Post reply on HN