Hacker News Reader

Also makes it really easy to forward a user to a nytimes phishing site.

e.g.

"Hey - did you see the new wordle? https://www.powerlanguage.co.uk/wordle/?url=https://www.exam... "

Seems like hopefully an easy and obvious fix - no need for a fully open redirect here!

Ah, I was wondering how it persisted the stats (which I presumed were stored via localStorage).

Ah! Thank you for this, I was wondering how they preserved the statistics through a move to a whole different site (where the old local storage of course can’t be accessed)

The statistics worked for me too, just the streak was reset.

This is clearly a violation of privacy because the url is unencrypted. NYT may face a billionaire lawsuit and his future is compromised.

The url is encrypted, the entire thing is over tls.

I find the idea amusing that exposing people's wordle scores would result in billion dollar damages. My life was ruined because someone was able to find out 60% of my wins are on 6 guesses!