TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

A collaborative spreadsheet in less than 45 lines of JS, one library used

199 pointsby kav-yaover 11 years ago

29 comments

mayop100over 11 years ago
It would be nice if people could lay off the script injections. It's clearly insecure, but that's not really the point. It makes the experience worse for everyone if you alert(), etc.
评论 #6730696 未加载
评论 #6730342 未加载
评论 #6730326 未加载
ehPRethover 11 years ago
If the spreadsheet doesn&#x27;t load you can watch the chaos unfold in real time by visiting the datastore&#x27;s page directly: <a href="https://spreadsheet.firebaseio-demo.com/sy85U" rel="nofollow">https:&#x2F;&#x2F;spreadsheet.firebaseio-demo.com&#x2F;sy85U</a>
wikwocketover 11 years ago
Nice. I look forward to the full office suite in 60 lines of JS, the email client&#x2F;server in 75 lines of JS, and of course the bitcoin exchange web app in 90 lines of JS.
评论 #6731055 未加载
评论 #6734425 未加载
评论 #6731236 未加载
评论 #6730844 未加载
projectramoover 11 years ago
I am waiting for someone to reproduce healthcare.gov with 100 lines of code...
评论 #6730680 未加载
评论 #6730363 未加载
fareeshover 11 years ago
I think the title should warn users of the various remote injection vulnerabilities present in the script. It took about 5 seconds for the page to change to xhamster
评论 #6731888 未加载
Goddel2over 11 years ago
Wow this link took about 30 seconds to turn into porn. Be warned.
mothertroubleover 11 years ago
WARNING: Could there be some kind of script attack ? My Safari browser freezes with &#x27;foo&#x27; alert message from this site and it has placed itself as default website so whenever I reopen safari it freezes again.<p>Let me know if you know how to fix this.
评论 #6730641 未加载
评论 #6732222 未加载
评论 #6731667 未加载
leokunover 11 years ago
Collaborative eval with the world, I&#x27;m glad I wasn&#x27;t logged into jsfiddle when I opened that.
评论 #6730426 未加载
rjuyalover 11 years ago
Now I really love the feature of Chrome, &quot;Prevent this window from creating new dialog box&quot; ( or something like that ). Some *$%#@ put alert in the cell.
Breefieldover 11 years ago
Careful, this code runs eval() on all spreadsheet fields. Someone can &quot;collaboratively&quot; steal your jsfiddle.net cookies.
评论 #6730467 未加载
评论 #6730394 未加载
评论 #6730713 未加载
RokStdyover 11 years ago
I like the craziness that this devolved into. It&#x27;s funny when a bunch of people are all editing like mad.<p>I had the thought that it&#x27;d be fun to have a contest using jsfiddle to start from some point, like the excel (lite) clone in 30 lines, and add the best&#x2F;coolest feature in some limit of lines.<p>It&#x27;s really wonderful how ingenuity stacks.
评论 #6730417 未加载
mmastracover 11 years ago
I think I crashed it (ie: Chrome hard lockup on the tab) with this:<p>=location.href=&#x27;google.com&#x27;
评论 #6730684 未加载
iancarrollover 11 years ago
Somebody has created a bot to put script lyrics in the spreadsheet ._.
评论 #6732826 未加载
justinwiover 11 years ago
Sweet. How do you do I make it so not every Joe can hack the sheet?
评论 #6730271 未加载
评论 #6730156 未加载
gmjoeover 11 years ago
Oh boy. I can&#x27;t wait to see what someone else can do with 60 lines of JS, and two libraries used!!<p>[Note: not being sarcastic. Think this is a genuinely awesome way to respond to first post!]
FiloSottileover 11 years ago
I would love to read about who&#x2F;how is blocking XSS and censoring!
评论 #6730554 未加载
rnlover 11 years ago
<a href="http://images.retecool.com/uploads/reet-And_its_gone_original.jpg" rel="nofollow">http:&#x2F;&#x2F;images.retecool.com&#x2F;uploads&#x2F;reet-And_its_gone_origina...</a>
10098over 11 years ago
I think we broke it, the fiddle no longer works for me
评论 #6730425 未加载
mariocesarover 11 years ago
I like that everyone is collaborating to keep N S A in the last columns, that is team work !
srobertsonover 11 years ago
very cool, probably need a few 100 more lines of code to stop XSS but awesome none the less.
njsubediover 11 years ago
I&#x27;m trying to remove the location.href thing outta there! Annoying!
cm-tover 11 years ago
Ooups, someone has having success with XSS :&#x2F;
Demiurgeover 11 years ago
lol, I think I just got hacked from that
EGregover 11 years ago
Why not just use TogetherJS securely?
Eduardover 11 years ago
did someone just execute remote javascript`?
newbrictover 11 years ago
someone just broke everything hahaha
maemiliusover 11 years ago
And someone killed it...<p>EDIT: Nevermind, it&#x27;s back.
vj44over 11 years ago
Dope.
hkonover 11 years ago
wow it&#x27;s alive