Skip to content
news.ycombinator.com·

🔒CodePen 2.0 Sends Your Code to Servers as You Type

Your Code is Leaving Your Browser

TL;DR

CodePen 2.0 sends your code to their servers in real-time, even before you save. This raises concerns about security and privacy, especially for developers handling sensitive information.

CodePen 2.0 sends your code to their servers as you type, even before you save or publish. This immediate data transfer can expose secrets and sensitive information, compromising security. Developers using CodePen for work should be cautious, especially when dealing with sensitive data. The preview pane in CodePen 2.0 is rendered on the server, adding another layer of concern. Other sites like Shopify and htmledit.squarefree.com also send data to their servers in real-time, raising broader privacy issues.

Key Points

1

CodePen 2.0 sends data to codepen.dev as you type, even before saving or publishing.

2

Secrets entered into CodePen can be compromised if sent to servers before saving.

3

CodePen's preview pane is rendered on the server, raising security concerns.

4

Shopify and htmledit.squarefree.com also send data to their servers as you type.

5

HotJar records mouse movements and clicks, adding to privacy concerns.

Why It Matters

If you're using CodePen for work, especially with sensitive data, you're at risk. CodePen 2.0 sends your code to their servers as you type, potentially exposing secrets. Developers should consider using client-side solutions for sensitive projects.

CodePensecurityprivacyweb-developmentdata-exposure

Frequently Asked Questions

Why does this matter?

If you're using CodePen for work, especially with sensitive data, you're at risk. CodePen 2.0 sends your code to their servers as you type, potentially exposing secrets. Developers should consider using client-side solutions for sensitive projects.

What happened?

CodePen 2.0 sends your code to their servers in real-time, even before you save. This raises concerns about security and privacy, especially for developers handling sensitive information.

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Also get