Hey @webrecorder, due to the recent developments regarding #Reddit I'd like to start archiving important resources.

Initially I found #ArchiveBox but they seem to have some security issues to mitigate with JS (XSS). https://github.com/ArchiveBox/ArchiveBox/issues/239

I was wondering how your #replayweb.page / #webrecorder / #pywb tool handles JS. Does it keep the page working without allowing malicious JS?

#archiving

Architecture: Archived JS executes in a context shared with all other archived content (and the admin UI!) · Issue #239 · ArchiveBox/ArchiveBox

Describe the bug Hi there! There's an XSS vulnerability when you open your index.html if you saved a page with a title containing an XSS vector. Steps to reproduce Save this page for example: [Twit...

GitHub