110 pointsby joshka4 days ago4 comments
  • ComputerGuru3 days ago
    Completely appalled to learn that docs.rs lets you inject any html/css/js you want into the live site (on pages documenting your crate). I love the flexibility but shudder at the security hole the size of, oh, I don’t know, the Grand Canyon.

    It’s not a new discovery, I just didn’t know docs.rs (intentionally) wasn’t blocking this. Cf https://docs.rs/pwnies/0.0.13/pwnies/

    • db48x2 days ago
      Yea, it’s technically a bad idea but on the other hand there’s nothing there to steal.
  • wonger_3 days ago
    How have other doc providers handled multilingual code highlighting at scale?

    Also, seems clever to use custom elements to reduce `<span class="highlight-whatever">` to `<a-k>`.

  • nicolas_gua day ago
    The link does not work
  • zem3 days ago
    this looks like a truly amazing piece of work. props to the author for doing a very thorough job.
    • dcminter3 days ago
      Amos is horrifyingly productive!