Press any key to continue… No, not that one!

  • 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: July 5th, 2023

help-circle




  • mark@programming.devtoLemmy@lemmy.mlLemmy RFCs
    link
    fedilink
    English
    arrow-up
    32
    ·
    edit-2
    1 year ago

    This is 👍. For those wondering, RFCs have been around for years in software engineering–since the beginning of the internet, practically.

    As a software engineer myself, I can confidently say they’re a great way to build complex software in a more democratic way.

    They require a certain level of agreement and consensus, which makes them take a while to ratify. But you almost always end up with better software in the end.



  • Yeah I think this was hastily done to prevent the XSS injection attacks that were happening IIRC. They implemented encoding for content, but looks like they never got around to fully decoding it.

    Issue could’ve been avoided by just restricting the encoding to when the user types content in (and before database insertion), and decoding when showing the content in the UI.




  • mark@programming.devtoLemmy@lemmy.mlGitHub - LemmyNet/lemmy-ui-leptos
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    edit-2
    1 year ago

    I appreciate improving the UI, but why all the frameworks? Building simple static pages using the native web platform would give you a super fast site without all the cruft. Using Rust in place of JavaScript? This just sounds like we’re trading a “frankenstein’s monster” with something that will eventually end up being another version of it.