HN user
That's not true. There have been PDF.js exploits that lead straight to RCE. This has the additional downside of leading to immediate compromise on every platform.
Example (used by Mariusz Mlynski to win Pwn2Own this year): https://www.mozilla.org/en-US/security/advisories/mfsa2015-3...
Here's a tool I wrote that grabs your internal IP and scans your LAN using response timings and HTTP asset fingerprints:
Demo: http://joevennix.com/lan-js/examples/dashboard.html Code: https://github.com/joevennix/lan-js
If you are interested and have some time, find and contribute HTTP "fingerprint" assets from devices on your LAN to src/db.js.
"Native desktop" spotify is just a web app wrapped into an embedded Chromium browser.
You can't, there was a bug in my code when run on firefox fullscreen.
Formatting options would be nice, for now you can copy some text from an external HTML document and it will preserve the formatting. You can then edit this text.
Fixed it with *{background: white;}, strangely enough.
I cannot for the life of me figure out how to fix this. Maybe someone here knows. I define the fullscreen bg color:
bg:fullscreen, bg:-webkit-full-screen, bg:-moz-full-screen {
background-color: rgba(255,255,255,0);
}
Added a cmd-S to save to txt.
It's a Safari bug unfortunately.
https://medium.com/adventures-in-consumer-technology/allow-k...
Seems like the best recourse is to disable the feature in Safari. Bummer.
Thanks for the votes :) The code is here if anyone wants to modify it (this site is hosted on github pages):
Silly bug. Should be fixed now, with a .focus() call.
Yeah right now there is only saving as the browser allows (print to PDF is another way). I'll add support for saving as a .txt on cmd-S through HTML5 download API in a bit.
Okay, feature implemented :) To work on a new file just change the URL hash
wakes up 10 hours later to find this on HN homepage
Sorry, originally I had some functionality so that changing URL hash gives you a new file. At some point I switched this to using location.pathname and broke it. Let me add it back :)