Host webpages on Google Drive

#1

Post by HugoDias » Tue, Feb 05, 2013, 6:38 PM UTC

Host webpages on Google Drive
googledrive.com

Re: Host webpages on Google Drive

#2

Post by mixedbit » Tue, Feb 05, 2013, 6:44 PM UTC

They serve user supplied JS from googledrive.com domain? Can it be done in a secure way?

Re: Host webpages on Google Drive

#3

Post by rgbrenner » Tue, Feb 05, 2013, 7:13 PM UTC

mixedbit wrote: post #2

They serve user supplied JS from googledrive.com domain? Can it be done in a secure way?

What security issue are you thinking of? JavaScript doesn't run anything server-side...

Re: Host webpages on Google Drive

#4

Post by adhipg » Tue, Feb 05, 2013, 7:15 PM UTC

mixedbit wrote: post #2

They serve user supplied JS from googledrive.com domain? Can it be done in a secure way?

Dropbox also does that. You can potentially host your website within your 'Public' Dropbox folder.

I'm sure Google is not using http://googledrive.com/ for anything that's user-identifiable.

The only harm that I think can happen with JS is you being able to access/set any cookies/storage that are set by another 'public' site hosted on Google Drive that you've accessed earlier.

Re: Host webpages on Google Drive

#5

Post by hkmurakami » Tue, Feb 05, 2013, 7:16 PM UTC

I think this might be a pretty nice tool for people learning how to program for the web, in that it's easy to share a link with friends for some quick feedback.

Re: Host webpages on Google Drive

#6

Post by aviswanathan » Tue, Feb 05, 2013, 7:21 PM UTC

I've been waiting for this for a while. Although git is my preferred method of working, for people who aren't technical and who just can't do stuff from terminal, I think this is a great alternative.

Re: Host webpages on Google Drive

#7

Post by aviswanathan » Tue, Feb 05, 2013, 7:21 PM UTC

I've been waiting for this for a while. Although git is my preferred method of working, for people who aren't technical and who just can't do stuff from terminal, I think this is a great alternative.

Re: Host webpages on Google Drive

#8

Post by mchanson » Tue, Feb 05, 2013, 7:24 PM UTC

adhipg wrote: post #4

mixedbit wrote: post #2

They serve user supplied JS from googledrive.com domain? Can it be done in a secure way?

Dropbox also does that. You can potentially host your website within your 'Public' Dropbox folder. I'm sure Google is not using http://googledrive.com/ for anything that's user-identifiable. The only harm that I think can happen with JS is you being able to access/set any cookies/storage that are set by another 'public' site hosted on Google Drive that you've accessed earlier.

Dropbox shuts links down if you get any significant traffic.

Re: Host webpages on Google Drive

#9

Post by lmkg » Tue, Feb 05, 2013, 7:29 PM UTC

rgbrenner wrote: post #3

mixedbit wrote: post #2

They serve user supplied JS from googledrive.com domain? Can it be done in a secure way?

What security issue are you thinking of? JavaScript doesn't run anything server-side...

Being able to serve JavaScript from Google's own servers makes it easier to do a cross-site scripting attack against someone else's Google Drive site. Since the malicious JS would be from the same origin, it's no longer cross-site, and gets a free pass around some of the browser's anti-XSS features.

Re: Host webpages on Google Drive

#10

Post by businessleads » Tue, Feb 05, 2013, 7:31 PM UTC

mchanson wrote: post #8

adhipg wrote: post #4

Earlier quoted context omitted.

Dropbox also does that. You can potentially host your website within your 'Public' Dropbox folder. I'm sure Google is not using http://googledrive.com/ for anything that's user-identifiable. The only harm that I think can happen with JS is you being able to access/set any cookies/storage that are set by another 'public' site hosted on Google Drive that you've accessed earlier.

Dropbox shuts links down if you get any significant traffic.

That doesn't sound very fun...