You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Apr 28, 2022. It is now read-only.
We might want to either disable javascript using a content security policy, or make sure there's nothing tricky that can be done with arbitrary javascript in a page.
Right now the pub doesn't even use cookies or authenticate you so there's not much harm you could do. It would be neat if you could publish a full-fledged app this way including its javascript.
We also need Invite-only workspaces so that people can read and help host the data without getting the ability to write to it.
The text was updated successfully, but these errors were encountered:
Right now pubs do 2 things:
We could add a new mode for serving websites right out of Earthstar documents.
If you visited a URL like, say...
https://mypub.com/gateway/+gardening.123/mywebsite/index.html
then the pub could just serve your HTML files, images, etc directly.
See also: earthstar-project/earthstar#116 Support a publishing use-case
See also: https://github.com/earthstar-project/earthstar-fetch/tree/initial-implementation for URL format ideas
Security issues
We might want to either disable javascript using a content security policy, or make sure there's nothing tricky that can be done with arbitrary javascript in a page.
Right now the pub doesn't even use cookies or authenticate you so there's not much harm you could do. It would be neat if you could publish a full-fledged app this way including its javascript.
We also need Invite-only workspaces so that people can read and help host the data without getting the ability to write to it.
The text was updated successfully, but these errors were encountered: