Hacker News new | ask | show | jobs
by SomeStupidPoint 3183 days ago
A follow-up question: can you insert javascript:{stuff} as the URL your ad links to?

I'm actually curious if you could make "dangerous ads" where a stray click from a logged in account would trigger a transaction.

1 comments

Good point, I added a check specifically for this.
Also, what if somebody links to an enormous, hundred-megabyte sized image?
In the publish interface, we warn that huge images will be marked as NSFS. We also render a static version that we can serve as a backup or when we pass some number of ads.
Alternatively, can you send image compression bombs? (I don't know if image loads can be sent in a compressed format.)
Great question, I too would like to know this