Are there any more HTTP headers I should have on devdoodle.net? I'm going to add "Content-Security-Policy": "default-src 'self'", "X-Frame-Options": "DENY", "Vary": "Cookie". I'm a n00b with this, and I'm writing it all myself on node.js.
@AviD No, usually you get at least one or two with some originality, scandalous feature, or spectacular mishap. For instance, last year there was a fake woman with a fake beard (and (s)he won).
@CodesInChaos isn't it? Of course its a duplicate. it is asking about the relationship between closing window and logging out, which goes directly to the veracity of the logout mechanism. Which is answered there perfectly.
This year, the most original were a polish singer in a wheelchair, and a serbian female singer of stupendous proportions, almost as spherical as Simon's mom.
France made a grand total of 4 points, which does not compare well to the winner (more than 300 points) but is still twice as much as last year's performance.
just to update you all - although @Adi was desperately trying to avoid meeting me, and went so far as to travel around the country for an entire day in the hope that I would be gone by the time he got there - he failed, as I was still around when he finally showed up. Still, it was close, only about 15 minutes overlap.
@AviD yeah traveling is always costly. I should be able to claim most of it back, but I'm rotten at getting receipts for stuff, so I'll inevitably have missed something
If I have a webpage with CSP set to:
default-src 'self'; img-src *
Or similar, and I have an iframe like such:
some legal content
<iframe sandbox="allow-scripts" srcdoc="<script>alert('arbitrary code')</script>"></iframe>
Is it possible to allow the code in the iframe to disobey the p...