1

Runnable snippets are very handy, especially when tackling JS and HTML questions, but they basically allow random people to execute random code in your browser.

I realize that snippets are iframed, thus sandboxed etc. etc. and that you have to run them explicitely, but aren't they just too open to malicious usages, like triggering social engineering tricks or vulnerabilities hidden in a JS mess? Would a basic sanitization be even possible?

Of course, any tech-savvy user would flag such a post immediately, but beginners might not spot the issue until it's too late.

2

0

You must log in to answer this question.

Browse other questions tagged .