【文章标题】：Apparently CodePen 2.0 sends data to their servers as you type 【文章标题】：显然CodePen 2.0会在你输入时就将数据发送至其服务器
【文章正文】： | | Hacker Newsnew | past | comments | ask | show | jobs | submit | login | | | Hacker News最新 | 过往 | 评论 | 提问 | 展示 | 工作 | 提交 | 登录 | | | | Apparently CodePen 2.0 sends data to their servers as you type | | | | 显然CodePen 2.0会在你输入时就将数据发送至其服务器 | | | | 20 points by maxim-fin 39 minutes ago | hide | past | favorite | 5 comments | | | | 20分 由maxim-fin于39分钟前发布 | 隐藏 | 过往 | 收藏 | 5条评论 | | | | They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it. I tested this with a unique marker: after typing it into index.html, CodePen ran a build with “save:false”, and the marker then appeared verbatim in the HTML served from the generated “.codepen.dev preview”. Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen | | | | 所有编辑器输入内容几乎会立即被发送至codepen.dev（输入机密内容后1-2秒内，就能在Network/Response标签页看到相应记录），甚至早于用户保存操作。我用唯一标识符测试发现：在index.html输入后，CodePen以”save:false”参数执行构建，随后该标识符原封不动出现在生成的”.codepen.dev预览版”HTML中。因此若曾误输敏感信息，即便未发布/保存作品，也应视为已泄露 |