On: Apparently CodePen 2.0 sends data to their servers as you type

[kypro]

This is so it can restore any unsaved changes.

I take no opinion on whether this is good or bad, but I can see how from a UX perspective it's nice not to lose 10 minutes of work because your browser crashes or something.

[maxim-fin → kypro]

Yes, absolutely, there are good reasons for that. The point is that any secrets typed/pasted in there should be considered compromized

Edit: but then if you you quit (or crash) without saving the pen first there is no way to recover unsaved work regardless. That is, the pen must be saved manually at least once for the user to benefit from the autosave.

[phyzome → maxim-fin]

Secrets pasted into any web page should be considered compromised.

[mkgiga → maxim-fin]

please don't paste credentials into codepen