Hacker Newsnew | past | comments | ask | show | jobs | submit | knassy's commentslogin

I'm interested in what's happening here. Can you provide a link/more info on what the XSS issue is?

(I honestly don't know and would love to learn about this. Thanks)


From what I can see, the issue is fixed now. But simply, someone put html in their useragent, the site copied it as text, and included it as text in the html. The browser then interpreted it as html, and executed the javascript.

The fix is to parse inputs, and replace < and > with html entities. You can see this fix if you read the source for the page.


> My ultimate goal though is for it to be presentable in IE7 with a top notch experience in anything newer, makes it a little easier.

I think that's the exact right attitude.

I work in an environment that supports back to IE7 and I really get a kick out of creating robust solutions that work in crappy or older browsers.

Admittedly I work with web sites, or simple applications, rather than full on web applications, but I find starting with sensible HTML/CSS/JS and using progressive enhancement usually gets me 95% of the way there.


And he lives in Wyoming right?


That was an excellent read. Thank you. I'll admit I'm often reluctant to read to much in to data I deal with daily (web analytics), as I'm unsure of how to measure its significance accurately. I'm going to dive in and learn more about this.


Why is it a surprise that where there's money to be made there's smart, motivated, savvy, ruthless people trying to get in on the action?


Because they come from a poor African country. If you are from a poor African country and you do anything other than run a marathon, live in a mud hut, or contract HIV people in the West are shocked.


Olicarchification, the new gentrification, is a bitch. What do all of these "successful 'creatives' (architects, cinematographers, commercial and television directors, etc.)" think happened to the people that were living there before them?


Report: Nation's Gentrified Neighborhoods Threatened By Aristocratization: http://www.theonion.com/articles/report-nations-gentrified-n... (2008)

"When you have a bejeweled, buckle-shoed duke willing to pay 11 or 12 times the asking price for a block of renovated brownstones—and usually up front with satchels of solid gold guineas..."


What do you mean the new gentrification? Creatives have always been a step in the march of gentrification, roughly approximated as "poor => creatives => wealthy"


That's exactly my point. The 'successful creatives' referred to don't sound like struggling artists and bohemians.

It's interesting that the author doesn't acknowledge where they sit in this process.


I think most people would be able to deduce that those people who were living there before moved somewhere else. If you can't use money to buy things that lots of people all want, why bother to earn the money in the first place?


Bounce rates are probably rising because you've just posted it on HN.


I've made sure to omit the HN hits from GA.


Agreed. They're having some fun. That said, I did stare at the pizza compass the whole way home on the bus tonight.



I found even after becoming competent in HTML/CSS and learning enough JS to do UI stuff, using APIs was still a mystery to me. Most API documentation is aimed at a more advanced audience.

I could use cURL to make a request, but I couldn't work out how to fit all the pieces together in a web app.

API tutorials which are truly for the beginner are a great idea.


Yeah I agree. But I'm not a big fan of having programming revolve around the "big guys." My two cynical cents.


I think it is easier to "test" these types of API calls for beginners with the biggest names. Understanding how to connect to Twitter is simple, and those same principles can be used to connect to a wide range of other things. I think, more than anything, connecting to Twitter or Evernote is "safe". Which is good for beginners.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: