Newsboard
Consumer and social
link aggregator
SHOW HN2020
24points
17comments
#1,545of 3,028 in 2020
Top 52%of 2020 by points
How HN took it
MixedNo clear lean
2 positive, 3 neutral or asking, 0 mixed, 4 critical, out of 9 comments about the project. Thread score -0.18.
Privacy: 0 for, 2 againstExecution: 0 for, 1 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Looks neat and tidy, close to the HN look
From 2 comments
Looks neat and tidy. Is it open source?
freetonik on HNOP here. Right, that's the source: https://github.com/robdelacruz/newsboard I used plain css from scratch to keep it small. I tried to copy the HackerNews look, but using Flex…
robdelacruz on HN
Objections
Security holes: JavaScript injection in titles and tags
From 2 comments
@robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
jenoer on HNi think someone figured out how to include their own javascript inside the website i got two alert boxes when i opened the page.
brian_herman__ on HN
Session cookie can be altered to log in as any user, including admin
From 1 comment
@robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
jenoer on HN
No server-side validation of input length
From 1 comment
It looks like you're using HTML form maxlength attributes to determine the maximum length for elements. I hope you're also validating that on the server somehow, because of…
krapp on HN
Requests
Fix the security bugs
From 2 comments
@robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
jenoer on HNYou should probably take this down now
maps7 on HN
Limit title length
From 1 comment
@robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
jenoer on HN
Questions
Is it open source?
From 1 comment
Looks neat and tidy. Is it open source?
freetonik on HN
Alternatives named
Hacker News
From 2 comments
Is the source for HN available?
whinvik on HNThe first link on the demo is this - https://github.com/robdelacruz/newsboard Seems like the source > newsboard - a bulletin board and bookmark sharing site (inspired by…
iKevinShah on HN
Hugo hugonews theme
From 1 comment
It looks like it's using this hugo theme but I may be wrong. https://themes.gohugo.io/hugonews/
DarthGhandi on HN