NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
My Gift to the Rustdoc Team (fasterthanli.me)
ComputerGuru 4 days ago [-]
Completely appalled to learn that docs.rs lets you inject any html/css/js you want into the live site (on pages documenting your crate). I love the flexibility but shudder at the security hole the size of, oh, I don’t know, the Grand Canyon.

It’s not a new discovery, I just didn’t know docs.rs (intentionally) wasn’t blocking this. Cf https://docs.rs/pwnies/0.0.13/pwnies/

db48x 4 days ago [-]
Yea, it’s technically a bad idea but on the other hand there’s nothing there to steal.
wonger_ 5 days ago [-]
How have other doc providers handled multilingual code highlighting at scale?

Also, seems clever to use custom elements to reduce `<span class="highlight-whatever">` to `<a-k>`.

zem 5 days ago [-]
this looks like a truly amazing piece of work. props to the author for doing a very thorough job.
dcminter 4 days ago [-]
Amos is horrifyingly productive!
nicolas_gu 3 days ago [-]
The link does not work
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 03:15:37 GMT+0000 (Coordinated Universal Time) with Vercel.