CodePen 2.0 平台被发现在用户编辑代码期间,几乎实时地将输入内容传输至 codepen.dev 服务器1。测试者通过在 HTML 编辑器中输入唯一标记进行验证,发现该标记随后出现在生成的预览页面中,证实数据在保存前就已被捕获1。
根据测试,数据传输在用户输入后 1-2 秒内即会发生1。这意味着用户在编辑器中输入的内容,即使未经主动保存或发布,也会被上传至服务器1。这种行为引发了对用户隐私的担忧,因为误输入的敏感信息可能在编辑过程中就已被服务器捕获1。
CodePen 2.0 has been found to send editor content to its servers nearly instantaneously as users type code, without waiting for the code to be saved 1. A tester verified this behavior by entering a unique HTML marker and observing it subsequently appear in the generated preview page, even though the code had not been published or explicitly saved 1. This means that mistakenly typed sensitive information could potentially be captured by CodePen's servers before users have a chance to delete or correct it 1.
According to the testing, data transmission occurs within one to two seconds of user input 1. The discovery raises concerns, as unintended content may already reside on CodePen's servers at codepen.dev regardless of whether the user finalizes their work 1.
评论
还没有评论,欢迎留下第一条。