Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

EmDash – A spiritual successor to WordPress that solves plugin security

blog.cloudflare.com

Post reply on HN
Print view View original

381–390 of 558 posts

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#381

Post by TrueSlacker0 »

earthlingdavey wrote: post #260

This is very interesting. I've worked with WordPress on and off for 10 years, and I'm convinced that this project has got 2 things absolutely spot on. TypeScript and Worker plugins. I've given the security, or lack of, WP a lot of thought recently. In WP malicious plugin has access to the database, enfironment variables, rendering text on screen (think XSS). Luckily, a thoughtfully designed plugin system can mitigate…

I personally i am in the other camp and think they got the language change absolutley wrong. I already have php installed on my server why do i need to install TypeScript? The easiest website to run is in php. All other languages add a barrier.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#382

Post by sakesun »

0xbadcafebee wrote: post #110

Serious question: Why is everyone still using JavaScript to AI-code projects? You can vibe-code apps with real languages now. There's no reason to use an interpreted, bloated, weird language anymore. The only reason interpreted languages were a thing was so you could edit a file and re-run it immediately without a compile step. Compiling is now cheap, and you don't have to build expertise in a new language anymore. A…

Because of the runtimes (v8), I believe.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#383

Post by julianlam »

bombcar wrote: post #287
foopod wrote: post #221

As a (unfortunately) wordpress dev this seems to solve my single biggest painpoint with WP. Which isn't plugin security, but the overall plugin architecture. WP treats plugins as content, literally in the same top level `wp-content` directory as uploaded images. This makes CI/CD among other things, a nightmare. But EmDash plugins are just TS modules, which has got to make things easier even if plugin configuration do…

Wordpress has no concept of a "staging site" and no way to make changed and then "export" them from dev to production; you basically have to either restore it as a backup or just replay the changes by hand.

Why would you expect it to? It probably predates these concepts. /s

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#384

Post by bzmrgonz »

Welp, it looks like if you selfhost, the sandboxing of plugins benefit goes out thr window from what I'm reading. What kind of open source is that? Opencore? More like openinsecure, for thr security version, pay the Piper. I might still give it a try, but I sure hope we can put monthly monetary ceiling, had ceilings on our accounts. Anyone knows if cost-caps are possible on CLOUDFLARE??

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#385

Post by anon7000 »

arcfour wrote: post #355
nulltrace wrote: post #339

Earlier quoted context omitted.

Open source runtime, not the orchestration layer on top.

Are you saying that by providing a globally available service, they're engaging in vendor lock-in, because otherwise you'd have to build your own globally available and distributed service...? ...yeah? But if you wanted to run Workerd on EC2 or Google Cloud or whatever, you could...so not really sure how that applies here.

You cannot say you’re the spiritual successor to WordPress, if your software doesn’t support running plugins out of the box on arbitrary installs. WordPress is very easy to host and scale, you only need a basic server and a CDN. A spiritual successor would follow that and also have all the new shiny stuff.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#386

Post by ipadbabycc »

andy_xor_andrew wrote: post #51

> x402 is an open, neutral standard for Internet-native payments. It lets anyone on the Internet easily charge, and any client pay on-demand, on a pay-per-use basis. A client, such as an agent, sends a HTTP request and receives a HTTP 402 Payment Required status code. In response, the client pays for access on-demand, and the server can let the client through to the requested content. Fascinating. Cloudflare is envis…

> I don't know how I feel about that

Oh dont worry, I'll do the feelings for the both of us, I have over a decade of experience feeling smugly and validatingly superior to people who save payment info on ipads and then hand it to their kids.

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#387

Post by tim-projects »

echelon wrote: post #10
kocialnews wrote: post #4

The power of WordPress is not the ease of use, but PHP. Anything built on PHP will be widely used, like Laravel

All PHP is going to be replaced with single binary Rust apps. Talented teams will build the atoms for most apps - blogs, CMSes, ticket systems, forums - and it'll be easy for end users to configure. Rust is easy to code gen and deploy now. No barrier to understanding lifetimes. It's the language everyone should be using Claude Code to emit. Everyone is now a Rust engineer with 10 years of experience. (I'm not joking,…

Having to compile makes it a pain in the ass to develop with vs php. No existing WordPress dev would ever willingly make that choice

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#388

Post by bzmrgonz »

bzmrgonz wrote: post #384

Welp, it looks like if you selfhost, the sandboxing of plugins benefit goes out thr window from what I'm reading. What kind of open source is that? Opencore? More like openinsecure, for thr security version, pay the Piper. I might still give it a try, but I sure hope we can put monthly monetary ceiling, had ceilings on our accounts. Anyone knows if cost-caps are possible on CLOUDFLARE??

Also, it looks like there are egress charges to download R2 object storage. So he day we choose to exit stage left, we will be taxed. Wanna setup independent backups for compliance, we will get taxed on egress. Am I reading this right guys??

Re: EmDash – A spiritual successor to WordPress that solves plugin security

#390

Post by born-jre »

i have been a admirer of wordpress plugin system and had been shouting for modern alternative with explicit capability model for sometime. I also have been building own composable app platform (not cms) and this looks kinda great actually.

https://github.com/blue-monads/potatoverse

Post reply on HN