logoalt Hacker News

Requests, Please

65 points • by sysoleg • last Monday at 9:23 AM • 15 comments • view on HN

Comments

athrowaway3z • today at 1:43 PM

This is pretty cool, but at the same time i'm horrified that somebody might walk away thinking you need to deny these requests to protect against XSS or SQL injection.

Maybe i want to sell coffee mugs with `<img src=x onerror=alert(document.domain)>` on them.

Parse, dont validate. (And never interpret what shouldn't be)

➕ show 1 reply
justusthane • today at 12:30 PM

This is a ton of fun! Small suggestions:

    - A way to copy (or better yet, email) a session link so I can switch between devices while maintaining my progress
    - Allow 1 and 2 to function as hotkeys for Allow and Block, so I don't have to move between "a" and "b" for Allow and Block, and then the number keys for the block reason
agileAlligator • today at 12:51 PM

I made a similar thing, but you are the LLM

https://avneeshk.me/you-are-the-model/

➕ show 1 reply
nticompass • today at 11:53 AM

So, it's "Papers, Please" but you're a firewall? I like it. Pretty cool.

➕ show 1 reply
orthogonal_cube • today at 12:32 PM

Only tested the first round but identifying SQL injections and XSS brings back memories. Fun project!

welldoneator • today at 12:09 PM

This is really fun, I enjoyed it a ton!

deadbabe • today at 2:45 PM

Please keep the missed attacks on screen instead of rushing to the next request and just leaving some error log.