So is the usecase for this that you save un trusted html from your user in your database, then send that untrusted html to your users, but in the front end parse it down to just the safe bits?
I think maybe a better api would be to add an unsafe html tag so it would look something like:
<unsafe>
all unsafe code here
</unsafe>
Then if the browsers do indeed support it, it would work even without javascript.
But in any case, you really should be validating everything server side.
I think normal people don't know the difference between google and a web browser. Even many of the ones that used to understand the difference forgot some time after their primary computing device became a locked down phone.
Can confirm. My wife (who is a very normal person) was using bing the other day and when I pointed it out she asked me what I was talking about and pointed to the chrome browser icon in the taskbar. The level of confusion is almost unfathomable to us.
I always thought that "Dark Patterns" could be emergent from AB testing, and prioritizing metrics over user experience. Not necessarily an intentionally hostile design, but one that seems to be working well based on limited criteria.
Someone still has to come up with the A and B to do AB testing. I'm sure that "Yes" "Not now, I hate kittens" gets better metrics in the AB test than "Yes "No," but I find it implausible that the person who came up with the first one wasn't intentionally coercing the user into doing what they want.
That's true for UI, it's not true when you're arbitrarily injecting user feedback into a dynamic system where you do not know how the dominoes will be affected as they fall.
I definitely felt older back in my early thirties, but I feel like I got younger now in my mid 40s. I think it's because my kid is in college and doesn't need me as much as they used to. Plus, I'm debt free and make enough money to not worry about the cost of going out.
In my late 20s/early 30s I was under water on my house, not getting paid enough, and had a small child. It was clear that I had to step up and "be a man." Which, I intuitively think had a bigger effect on me than simply getting older.
I'm not sure if you're splitting hairs or not. I definitely thought this post would be about them finding open source alternatives to binary firmware, but if it doesn't interoperate with optional non-free software then it is not Open Source.
It seems to be comparable to debian, and that's as open source as it gets.
Yeah, it's a perfectly fine place to land. My objection is completely to claiming to be 100% open source when it isn't; if they'd just said 99% open source, or that everything they'd written was now open, then I wouldn't mind (or at least, I'd view it as unfortunate, but I wouldn't be upset with them).
You're not wrong, but if it was a common issue then hotels would start offering those things to differentiate themselves. I know a few currently do that as a way to get you into their loyalty program.
As a rule, I always check the hotel's price directly on their site. Often there's quite a difference both in prices and in terms. And you can also call the hotel for some goodies. Sometimes, of course, but totally worth trying. Yes, I have no remorse short-circuiting Booking when they overdo it.
I think maybe a better api would be to add an unsafe html tag so it would look something like:
Then if the browsers do indeed support it, it would work even without javascript.But in any case, you really should be validating everything server side.
reply