This is pretty cool, but at the same time i'm horrified that somebody might walk away thinking you need to deny these requests to protect against XSS or SQL injection.
Maybe i want to sell coffee mugs with `<img src=x onerror=alert(document.domain)>` on them.
Parse, dont validate. (And never interpret what shouldn't be)
Though in this case, it would be: escape, don't sanitize. "Parse, don't validate" applies to taking inputs; this applies to generating outputs (like SQL queries or HTML markup).
- A way to copy (or better yet, email) a session link so I can switch between devices while maintaining my progress
- Allow 1 and 2 to function as hotkeys for Allow and Block, so I don't have to move between "a" and "b" for Allow and Block, and then the number keys for the block reason
So this game needs a story arc where you become an accomplice to specific threat group to bring vigilante justice while maintaining plausible deniability by blocking some of their requests without letting your total numbers drop below a specific threshold?
Maybe i want to sell coffee mugs with `<img src=x onerror=alert(document.domain)>` on them.
Parse, dont validate. (And never interpret what shouldn't be)
https://avneeshk.me/you-are-the-model/