Newsboard

Consumer and social

link aggregator

SHOW HN2020

24points
17comments
#1,545of 3,028 in 2020
Top 52%of 2020 by points

How HN took it

MixedNo clear lean

2 positive, 3 neutral or asking, 0 mixed, 4 critical, out of 9 comments about the project. Thread score -0.18.

Privacy: 0 for, 2 againstExecution: 0 for, 1 againstDesign: 1 for, 0 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Looks neat and tidy, close to the HN look

    From 2 comments
    • Looks neat and tidy. Is it open source?
      freetonik on HN
    • OP here. Right, that's the source: https://github.com/robdelacruz/newsboard I used plain css from scratch to keep it small. I tried to copy the HackerNews look, but using Flex…
      robdelacruz on HN

Objections

  • Security holes: JavaScript injection in titles and tags

    From 2 comments
    • @robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
      jenoer on HN
    • i think someone figured out how to include their own javascript inside the website i got two alert boxes when i opened the page.
      brian_herman__ on HN
  • Session cookie can be altered to log in as any user, including admin

    From 1 comment
    • @robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
      jenoer on HN
  • No server-side validation of input length

    From 1 comment
    • It looks like you're using HTML form maxlength attributes to determine the maximum length for elements. I hope you're also validating that on the server somehow, because of…
      krapp on HN

Requests

  • Fix the security bugs

    From 2 comments
    • @robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
      jenoer on HN
    • You should probably take this down now
      maps7 on HN
  • Limit title length

    From 1 comment
    • @robdelacruz: I have a few security-related findings for you that you might want to take a look at: - I can inject any JavaScript in Titles, Tags and possibly other locations. -…
      jenoer on HN

Questions

  • Is it open source?

    From 1 comment

Alternatives named

  • Hacker News

    From 2 comments
    • Is the source for HN available?
      whinvik on HN
    • The first link on the demo is this - https://github.com/robdelacruz/newsboard Seems like the source > newsboard - a bulletin board and bookmark sharing site (inspired by…
      iKevinShah on HN
  • Hugo hugonews theme

    From 1 comment
    • It looks like it's using this hugo theme but I may be wrong. https://themes.gohugo.io/hugonews/
      DarthGhandi on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/24268079)