HN user

pewallin

12 karma
Posts4
Comments5
View on HN

Basically by disallowing read access to /users in the Firebase security rules (which you should do), the latter 50% of the article would be moot. However the html injection is interesting, be extra careful to validate data when using dynamic jquery-selectors?

If you are new to Javascript you should note that this tutorial makes heavy use of Promises which is one way to handle callbacks piling up, but it's not the only way, or even the most common.