1
There's more to HTML escaping than &, <, >, and "
This was exaggeration for effect—there aren’t many cases where a simple XSS injection could actually empty a bank account—but I wanted to make a point.
wonko.com
I write code. I love movies and pie! I live in Portland, Oregon with a co-protagonist and some cats and a lot of computers.
- Popular posts
- 4
- Total points
- 300
- HN comments
- 125
- Rank
- #8,887 personal
Visit wonko.com → On Hacker News Dec 2009 – May 2011
Software Engineering 2Tech Industry & Business 2Web & Frontend 1
2
3
Etherpad includes banned (on Google code) software JSMin
Last week, Google banned my PHP port of JSMin from Google Code due to a quibble over a line in the license stating that “The Software shall be used for Good, not Evil”, which they believe makes the license non-free. When I asked Google’s Chris DiBona whether all Google Code projects including JSMin would be subject to…
4
JSMin isn't welcome on Google Code
Google’s Chris DiBona emailed me this morning to tell me that unless I removed a specific line from the license of my jsmin-php project (a PHP port of Douglas Crockford’s JSMin ), Google Code would no longer host the project.