Apparently CodePen 2.0 sends data to their servers as you type
The short version
- I tested this with a unique marker: after typing it into index.html, CodePen ran a build with "save:false", and the marker then appeared verbatim in the HTML served from the…
- Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen Comments URL:…
The story
They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it. I tested this with a unique marker: after typing it into index.html, CodePen ran a build with "save:false", and the marker then appeared verbatim in the HTML served from the generated "*.codepen.dev preview". Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen
Comments URL: https://news.ycombinator.com/item?id=49596976
Points: 8
# Comments: 0
Powered by Gab AI
The Story At A Glance
Reading this article now — analysis appears below
💡 AI analysis provides alternative perspectives on current events