Comments (9)
Primary risk I see is the ability of a site to unsandbox itself entirely and control the parent page. I'm unclear on the risks there.
Secondary 'risk' is storing things in LocalResources like IndexedDB would be accessible to other pages - a developer should know not to put sensitive data in there and only leverage it for indexing large amounts of public data for local querying.
from zeronet.
Yeah, the main problem is all site is using the same domain. Permission requesting is a good idea (maybe with other http://www.html5rocks.com/en/tutorials/security/content-security-policy/ features)
Later we can pack a sqlite server, so the clients can do queries via websocket api.
Util then please use flat json files or any format supported by alasql
Please let me know if you have any benchmark results on indexedDB vs flat json vs alasql.
from zeronet.
Will try alasql for some things. I'd like to see some sort of decentralized read, centralized yet disconnected write, secure, database synchronization framework ultimately.
I think the model makes sense for publishers of data to connect to a node, transmit changes, then unplug. Then, be able to remain offline and receive messages back when connecting - ala bitmessage.
I should write a tech doc for what I'm envisioning here.
from zeronet.
Can this system execute serverside nodejs?
from zeronet.
Not directly, but you can write files using the API. (see ZeroBlog example)
from zeronet.
Now its possible to use browser's localStore with ZeroFrame API:
http://zeronet.readthedocs.org/en/latest/site_development/zeroframe_api_reference/#wrappergetlocalstorage
from zeronet.
@HelloZeroNet @shortcutme
Do you consider implementing IndexedDB?
It can make Riot.im run inside ZeroNet.
@anoadragon453
from zeronet.
Not really, but you can use sqlite as indexed key-value storage
from zeronet.
@anoadragon453
Can it be used to port Riot.im?
from zeronet.
Related Issues (20)
- How to use ZeroNet on Android? HOT 10
- zeroid not working for create id HOT 4
- Spammers attack ZeroNet with hostile forks in order to defraud ZeroNet users. HOT 41
- UnboundLocalError: local variable 'err' referenced before assignment
- Unhandled exception: AttributeError: 'Site' object has no attribute 'greenlet_manager'
- ZeroNet version
- Unhandled exception: ModuleNotFoundError: No module named 'socks'
- tracker connection error detected and content.json downloading failed even using tor with bridge HOT 1
- ZeroNet's successor: The Peer-to-Peer Network HOT 4
- Security problem on ZeroMail (and all zeromail clones) need to be allowed [email protected]: (the auth address), malicious user can read, delete, send messages have full access to your mailbox! HOT 3
- ReDoS in built-in file editor (UiFileManager) due to outdated codemirror lib
- Hello Dev . Command not work
- Unhandled exception: RuntimeError: dictionary changed size during iteration HOT 2
- Unhandled exception: AttributeError: 'ConfigPlugin' object has no attribute 'getCmdlineValue'
- UI Change For the Website HOT 1
- Zeronet HOT 2
- offline, moving data using esp or usb flash
- Low seeded zites can be manipulated, they can be rendered unusable security issue
- Use Lokinet network
- deletion of false orphans at startup when appending --ui_ip '*'
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zeronet.