Show HN: ChromeREPL, Interact with Chrome from Sublime Text

Post by gitgud » Sun, Jun 10, 2018, 9:30 PM UTC

Post by parhamn » Sun, Jun 10, 2018, 10:08 PM UTC

gitgud wrote: post #2

This looks very useful, but it does concern me that this is even possible. Simply starting chrome with a `--remote-debug` flag allows you to run JavaScript in any tab? seems like it could easily be exploited somehow; read passwords, copy userinfo etc.

Post by drhodes » Sun, Jun 10, 2018, 11:25 PM UTC

ivan4th wrote: post #3

I wrote a somewhat similar tool for use with Emacs many years ago, SwankJS: https://github.com/swank-js/swank-js See this demo, for example: http://emacsrocks.com/e11.html It was not dependent on Chrome features and even did work with IE6 at some point. Too bad REPL-based programming is not very useful for modern JavaScript. There's a successor, though: https://github.com/skeeto/skewer-mode

Post by nerdponx » Sun, Jun 10, 2018, 11:49 PM UTC

gitgud wrote: post #5

parhamn wrote: post #4

Earlier quoted context omitted.

> Simply starting chrome with a `--remote-debug` I wouldn't call that "simple". Sounds like fine behavior given non-devs generally don't even know how to run Chrome with custom flags and developers know that remote debugging generally means remote execution with data/memory access. Would you prefer a better flag name or lock remote debugging to a subset of tabs?

That's true, I suppose as long as there's indication that the mode is enabled, a warning or something (haven't tested it myself yet). If the desktop launcher was modified to include that flag, then you would never know while browsing right? Maybe I'm just paranoid...

Post by adriancooney » Mon, Jun 11, 2018, 12:17 AM UTC