Show HN: Meteor, a realtime JavaScript framework
1–10 of 350 posts
Re: Show HN: Meteor, a realtime JavaScript framework
#2We've got a lot more stuff coming over the next few months, and if there are particular things you'd like us to do/prioritize, I'd love to hear about them!
Re: Show HN: Meteor, a realtime JavaScript framework
#3Hey everyone! The four of us have been working very hard on this for the last six months, and we're excited to finally take the wraps off. Can't wait to hear what you think! We've got a lot more stuff coming over the next few months, and if there are particular things you'd like us to do/prioritize, I'd love to hear about them!
Re: Show HN: Meteor, a realtime JavaScript framework
#4Does that freak anyone else out? Where are they doing permissions checking? Who can run what database commands under what circumstances?
Re: Show HN: Meteor, a realtime JavaScript framework
#5Re: Show HN: Meteor, a realtime JavaScript framework
#6Hey everyone! The four of us have been working very hard on this for the last six months, and we're excited to finally take the wraps off. Can't wait to hear what you think! We've got a lot more stuff coming over the next few months, and if there are particular things you'd like us to do/prioritize, I'd love to hear about them!
Re: Show HN: Meteor, a realtime JavaScript framework
#7"You can use the database api on the client!" Does that freak anyone else out? Where are they doing permissions checking? Who can run what database commands under what circumstances?
"Currently the client is given full write access to the collection. They can execute arbitrary Mongo update commands. Once we build authentication, you will be able to limit the client's direct access to insert, update, and remove. We are also considering validators and other ORM-like functionality."
So just for toys for the moment. Still, very cool...
Re: Show HN: Meteor, a realtime JavaScript framework
#8I am curious about the security aspect of writing to DB directly via the client but I'm sure you've thought of it. I love the 'add less', 'add coffeescript' feature. Can't wait to try this out soon.
Re: Show HN: Meteor, a realtime JavaScript framework
#9Hey everyone! The four of us have been working very hard on this for the last six months, and we're excited to finally take the wraps off. Can't wait to hear what you think! We've got a lot more stuff coming over the next few months, and if there are particular things you'd like us to do/prioritize, I'd love to hear about them!
Re: Show HN: Meteor, a realtime JavaScript framework
#10"You can use the database api on the client!" Does that freak anyone else out? Where are they doing permissions checking? Who can run what database commands under what circumstances?
Stupid hypnic jerk question perhaps, but, how's it deal with injection attacks ? is this left upto the javascript programmer to make sure strings are "safe" ? I almost dread the answers.