Hacker News new | ask | show | jobs
by marktangotango 3492 days ago
I loved geocities too, and I always wished I"d had a CORS backend to call from my HTML pages. I built a service specifically to be a CORS backend for neocities. You can signup, and start making CORS calls from your neocities pages to a sqlite database on my service. I tried several times to contact the owner of neocities about this but he never responded. Since then I implemented static file hosting and pivoted to a "Single Page App One Stop Shop" model. We offer custom domains and free ssl (Lets Encrypt) for early adopters. Link in my profile.
1 comments

> You can signup, and start making CORS calls from your neocities pages to a sqlite database on my service.

If I'm understanding what you're trying to do, this isn't on our end. Neocities currently doesn't prevent sites from making API calls to other servers - that's on your HTTP server's side, you control that.

Occasionally I get requests to allow HTML hosted on Neocities to make API calls directly to Neocities itself - which would be OK for things like basic stats lookup, but for things like file uploading/deleting/editing this is dangerous, because it would allow attackers to write scripts to hack people's accounts that can be executed by their own browsers. This is called a CSRF attack, and that's why we prevent people from doing that.

Sent an email to your kd dot net account.