Simon Willison’s Weblog

Subscribe

Monday, 12th March 2007

XSS. Sanitising HTML is an extremely hard problem. The sanitize helper that ships with Rails is completely broken; Jacques Distler provides a better alternative.

# 12:34 am / jacques-distler, rails, security, xss

Balancing One-Wheeled Scooter. Technical details of the scooter I linked to earlier.

# 1 pm / make, scooter

opensource @ Joost. Joost is built on top of Mozilla, Redland, SQLite and a bunch of other bits and pieces of Open Source infrastructure.

# 1:29 pm / joost, mozilla, open-source

wii.js (via) A JavaScript library that lets you detect the Wii browser, and provides easy hooks for reacting to keys pressed on the Wiimote.

# 10:23 pm / javascript, opera, wii

Google Video: How do I enter transcripts? Neat feature of Google Video I hadn’t seen before: you can upload timestamped transcripts of your videos. Anyone seen a video that uses these?

# 10:44 pm / google, google-video, subtitles, transcripts, video

You vs. the Real World. The lengths programming libraries go to to be liberal in what they accept.

# 10:48 pm / jacob-kaplan-moss, postelslaw

My Future of Web Apps talk as a slidecast

The team at Carson Systems have a pretty quick turnaround on their podcasts; they’ve had full recordings of every speaker up for a few days now. I spent a bunch of time over the weekend splicing the recording of my talk together with my slides, and the result is now available at The Future of OpenID (a slidecast).

[... 177 words]