Comment by SkyMarshal
3 years ago
Mostly agree. The screenshot in the top right looks good, like professional app I might actually use. But I want to actually browse the site and check it out without first slogging through a registration process. If it’s free to view/browse anyway, then enable doing that without registering. Register and pay if you want to post.
Edit: You can browse without registering after all, here’s the link: https://non.io/#all (didn’t see it on the landing page or OP post).
Oof, I clicked one of those posts and immediately lost all back-button functionality to an endless stream of history events.
I tried right clicking to open the link in a new tab, and found I couldn't. What is it with these bespoke browsers written in JavaScript?
Was it the "Daniel's Site" post? There's some weird interactions I'm finding with that iframe'd html upload and the history events.
As someone who dealt with payment iframes in SPAs I'm so happy I don't have to use any iframes nowadays. There are a few articles how you can "kind of track" when the iframe caused extra history entries then you need to increase your back navigation by the count of them, it was a mess back in the days so not sure how is it solved nowadays.
5 replies →
Also, when I visit the #all page I get two weird window.alert()’s, first says 5, second says 1. I’m on mobile Safari now so can’t really investigate, but is the site getting script injected??
Yes, the site is vulnerable to XSS, couple of interesting payloads on there so far
The current top post uses this XSS to have users upvote it:
<img src="a" onerror="soci.postData(String.fromCharCode(112,111,115,116,116,97,103,47,97,100,100,45,118,111,116,101),{post:String.fromCharCode(120),tag:String.fromCharCode(120)})">
Which sends a POST request to `posttag/add-vote` for the post labeled `x`
1 reply →
The marketing page is not readable on mobile either.
On Firefox Android, I could read the landing page and browse afyer creating an account.
I was not able to create an account. (I had to go desktop)
FF iOS here, front page loads but you get a zoomed in desktop view. Zooming out causes reloads.
The fact that this isn't on the landing page doesn't bode well for a 4 year old project.
Too harsh. That's normal if it's only now seeing light of day.
Are you being serious? The landing page had 1 job and it failed at doing it. I'm all for reddit alternatives but c'mon, a page showing off a product that fails to clearly link to said product is just funny.
The ui feels like it was designed for mobile as well, everything is on the far edges of the page and the center is entirely blank space unless you resize the window to be smaller horizontally
Aaanndd it's instantly overrun with spam