wasmerio / wasmer.io

The Wasmer.io website
https://wasmer.io/
21 stars 17 forks source link

Website looks like it's trying to sneakily run code on my computer. #70

Closed will-ca closed 1 year ago

will-ca commented 2 years ago

Describe the bug

I'm sure it's just a funny stylesheet error, but the pipe | sh is cut off from the install script copy-paste on https://wasmer.io, making it look like all the command will do is run curl:

image

image

Steps to reproduce

Visit https://wasmer.io/ and scroll to the section in question.

Copy the command, curious how this will work.

See that it actually pipes a random script into | sh.

Get spooked.

(For a couple seconds, I thought this was a deliberately deceptive marketing tactic before confirming that the HTML does at least show the pipe so it's probably just styling.)

Additional context

Browser: Chrome

dynamite-bud commented 1 year ago

No, this component is scrollable and shows the full command.