Do you ever know that Writely shows your blog’s username and password in their source code? They do, and is in plaintext!

var UserName = “username“;
var Password = “password“;

If you ever use Writely to post blog, take a look at the source code, and you will find both of your blog’s username and password there. Really scary huh, just remember to sign out everytime, and it should be fine.

I don’t really think it’s necessary to put these “top-scrects” in clients’ source files, what’s your thought?

UPDATE: I think I am kind of misleading, the password and username I am talking about is in the editing page, not the published document, and here’s the screen shot.

“A screen shot is better than thousand words.”