Timeline for Should "Run Snippet" option have a reputation requirement? (To prevent... user stupidity and SE as an attack vector)
Current License: CC BY-SA 3.0
7 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Apr 26, 2016 at 12:02 | comment | added | Oriol | @computerfreaker I don't have NoScript but I guess you should be able to trust StackOverflow in your NoScript config and still be able to block arbitrary code from stacksnippets.net | |
Apr 25, 2016 at 19:31 | history | edited | honk | CC BY-SA 3.0 |
fixed typo
|
Apr 25, 2016 at 15:09 | comment | added | GolezTrol | Of course, and questions containing it should be deleted and the posters should be banned. But do you want to take measures to prevent this being posted at all? I think not. | |
Apr 25, 2016 at 13:56 | comment | added | Laurel | It should be considered abuse to put malicious code in a Stack Snippet. | |
Apr 25, 2016 at 8:28 | comment | added | cf- | "If your router can be hacked by a stack snippet, it can also be hacked by a malicious banner ad or by any website for that matter." Not strictly true - I have global script denial from NoScript, but StackOverflow gets an exception since site features are fairly JS-reliant. As such, malicious scripts here automatically have an advantage over those hosted on almost any other site. I agree with the rest of your answer, though. | |
Apr 25, 2016 at 8:17 | history | edited | GolezTrol | CC BY-SA 3.0 |
added 33 characters in body
|
Apr 25, 2016 at 8:12 | history | answered | GolezTrol | CC BY-SA 3.0 |