41–50 of 70 posts
Pretty sure it always autosaved so this makes sense to me? I always assume it would send my data over to their backend, its code that ends up there regardless?
Yes, that is for autosave and for rendering Edit: The point is that any secrets typed/pasted in there should be considered compromized
Pretty sure it always autosaved so this makes sense to me? I always assume it would send my data over to their backend, its code that ends up there regardless?
Yes, that is for autosave and for rendering Edit: The point is that any secrets typed/pasted in there should be considered compromized
Earlier quoted context omitted.
Yes, that is for autosave and for rendering Edit: The point is that any secrets typed/pasted in there should be considered compromized
I don't know why anyone would paste or type secrets into codepen which is public by default... But it always seemed like it auto-saved / sent your code over to the back-end, going back ten years roughly?
That flow would be considered unsafe, and probably common.
Earlier quoted context omitted.
I don't know why anyone would paste or type secrets into codepen which is public by default... But it always seemed like it auto-saved / sent your code over to the back-end, going back ten years roughly?
Copy -> paste -> redact secrets That flow would be considered unsafe, and probably common.
Earlier quoted context omitted.
I don't know why anyone would paste or type secrets into codepen which is public by default... But it always seemed like it auto-saved / sent your code over to the back-end, going back ten years roughly?
Copy -> paste -> redact secrets That flow would be considered unsafe, and probably common.
This is so it can restore any unsaved changes. I take no opinion on whether this is good or bad, but I can see how from a UX perspective it's nice not to lose 10 minutes of work because your browser crashes or something.
Yes, absolutely, there are good reasons for that. The point is that any secrets typed/pasted in there should be considered compromized Edit: but then if you you quit (or crash) without saving the pen first there is no way to recover unsaved work regardless. That is, the pen must be saved manually at least once for the user to benefit from the autosave.
Earlier quoted context omitted.
Shopify does this. If you ever go to purchase a product on a Shopify 'site, and enter eg your e-mail address, it'll save it even if you decide to cancel and close the tab. Sometimes you receive spam from companies along the lines of marketing or "we noticed you didn't complete your purchase" type crap. Shit is rly invasive.
They can only send the marketing emails if you have the "send me marketing emails" checkbox checked when you type in your email address. Dark pattern, yeah.