Live data from Hacker News

WordPress WASM

github.com

11–20 of 69 posts

Re: WordPress WASM

#11
This is amazing for security, you’ll just need to hook the file system calls and block FS writes at the wasm bridge level.

It won’t prevent obvious security bugs in the PHP code though, which arguably is the most important attack vector for spammers trying to post stuff on your WordPress installation

Re: WordPress WASM

#12
post #10

WASM may offer the most secure-by-default installations of Wordpress to ever exist. This is seriously impressive -- I think we're getting a glimpse of a world where people can really run server side apps on their computers easily. Add an app store and the web will have finished becoming the platform that everyone has been suspecting it is.

And thanks to Chrome one severe bug will effect all around the globe. Monocultures are susceptible to pests and diseases

Can't be worse than unpatched wordpress plugins.

Re: WordPress WASM

#14
post #6

Earlier quoted context omitted.

Skip React/Vue/Svelte/next week's JS framework and client-side render your app directly in PHP, genius. /s

This just replaces the frontend framework written in JS with a frontend framework written in PHP compiled via wasm. It doesn't eliminate the need for something to manage views and state on the front end, as that's where you're executing all of your code now?

Yes indeed. The sarcasm may have been lost in my reply, running PHP in the browser is a great feat of engineering, but not a practical one.

Re: WordPress WASM

#15
post #12
post #10

Earlier quoted context omitted.

And thanks to Chrome one severe bug will effect all around the globe. Monocultures are susceptible to pests and diseases

Can't be worse than unpatched wordpress plugins.

I bet there are more Chrome installations then Wordpress

Re: WordPress WASM

#16

Earlier quoted context omitted.

This just replaces the frontend framework written in JS with a frontend framework written in PHP compiled via wasm. It doesn't eliminate the need for something to manage views and state on the front end, as that's where you're executing all of your code now?

Yes indeed. The sarcasm may have been lost in my reply, running PHP in the browser is a great feat of engineering, but not a practical one.

It's rare that I don't discern sarcasm, my bad!

Re: WordPress WASM

#17

Earlier quoted context omitted.

This just replaces the frontend framework written in JS with a frontend framework written in PHP compiled via wasm. It doesn't eliminate the need for something to manage views and state on the front end, as that's where you're executing all of your code now?

Yes indeed. The sarcasm may have been lost in my reply, running PHP in the browser is a great feat of engineering, but not a practical one.

Just wait what things on top of that WP-PHP people will come up with. This thing will blind enough people with the looks of "modern and shiny", that they might create something similarly vulnerable and mistake prone to original WP plugins. I mean, someone must be writing these plugins ... shudders

Re: WordPress WASM

#18
post #10

WASM may offer the most secure-by-default installations of Wordpress to ever exist. This is seriously impressive -- I think we're getting a glimpse of a world where people can really run server side apps on their computers easily. Add an app store and the web will have finished becoming the platform that everyone has been suspecting it is.

And thanks to Chrome one severe bug will effect all around the globe. Monocultures are susceptible to pests and diseases

People are already using Chrome or Chromium-based browser all over the world. VSCode, Spotify, Teams, Slack, Figma and many others use Electron or CEF which are based on Chromium. It is not necessarily going to be a bigger risk what what we have now.

And I am sure a severe bug in Qt will also affect almost everyone, no different from the Chromium situation. And I trust the Chromium/Electron community more than the random "another cross-platform UI framework" that pops up on hacker news that probably will not be maintained in a year. (I am some people don't like this sentence but they have to face the fact.)

Re: WordPress WASM

#19
For those wondering about the "why", this post details the motivation: https://make.wordpress.org/core/2022/09/23/client-side-webas...

Basically for learning/interactive tutorials, trying out something quickly in different PHP versions (which is cumbersome right now), secure and easy demos for themes and plugins.

Re: WordPress WASM

#20

WASM may offer the most secure-by-default installations of Wordpress to ever exist. This is seriously impressive -- I think we're getting a glimpse of a world where people can really run server side apps on their computers easily. Add an app store and the web will have finished becoming the platform that everyone has been suspecting it is.

So from user perspective, they still have to run it like they would run local web server but more secure? It's improvement security wise, though it's still hustle for app distribution right?
Post reply on HN