Live data from Hacker News

A collaborative spreadsheet in less than 45 lines of JS, one library used

jsfiddle.net

51–60 of 69 posts

Re: A collaborative spreadsheet in less than 45 lines of JS, one library used

#52
post #9

It would be nice if people could lay off the script injections. It's clearly insecure, but that's not really the point. It makes the experience worse for everyone if you alert(), etc.

> It's clearly insecure, but that's not really the point. No, that is the point. I even pointed it out hours ago: https://news.ycombinator.com/item?id=6727448 The failure is the lesson. The previous version was a clever hack written by a clever person. This is ignorance, and the lesson is that allowing users to run arbitrary code on other user's computers is bad idea.

I'm pretty sure that OP knew the issue, not just you, so it's not ignorance. And it's not the moment to cite The Good Parts either.

There is no failure here to be seen. There is a clever hack to make a spreadsheet shared quick and dirty.

Just a reminder that all the JS code you run, in particular on jsFiddle, is untrusted and is part of the security model of the JS engine in your browser that evil JS code must not be able to do any harm. If it did, report it to the browser vendor and earn a bounty.

Re: A collaborative spreadsheet in less than 45 lines of JS, one library used

#54

Nice. I look forward to the full office suite in 60 lines of JS, the email client/server in 75 lines of JS, and of course the bitcoin exchange web app in 90 lines of JS.

Did you forget an operating system in 150 lines of JS? (Four libraries used)

Re: A collaborative spreadsheet in less than 45 lines of JS, one library used

#57

I would love to read about who/how is blocking XSS and censoring!

Oh, that's me: http://jsfiddle.net/sy85U/31/ Just a very quick, crude little hack.

yeah blocking . (a dot, decimal numbers should be allowed) is a bit too restrictive although it works really well.
Post reply on HN