fernandotakai

What if a package did something like this, but instead of logging to the console, they sent it back to a server?

Have you actually reviewed every dependency and every child dependency in every app you deploy?

Why are people not more scared of this?

fernandotakai

CmdUtils.CreateCommand({
  name: "tinyarrow",
  takes: {"url to shorten": noun_type_url},
  icon: "http://tinyarro.ws/favicon.ico",
  description: "Replaces the selected URL with a <a href=\"http://tinyarro.ws\">TinyArrow (&#x27A1;.ws) URL</a>",
  execute: function( urlToShorten ) {
    //escaping urlToShorten will not create the right tinyurl
    var baseUrl = "http://tinyarro.ws/api-create.php?url=";
    jQuery.get( baseUrl + urlToShorten.text, function( tinyArrow ) {
      CmdUtils.setSelection( tinyArrow );