CodePen: exposed!

I promise this post is not merely a comment on a Hacker News submission because good lord that would be desperate but that is where I’m starting:They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it.Apparently CodePen 2.0 sends data to their servers as you typeThis post hit the front page with over 100 upvotes.The author seems concerned as if CodePen is doing something untoward. In reality that behaviour should be fully expected. CodePen processes your code to generate a live preview. And to the relief of our browsers that’s done server-side without shipping a JavaScript bomb. CodePen has other features like live colloboration that require it too.Technically an “autosave” feature can be done locally using browser storage but CodePen uses the server for that too. This allows users to restore unsaved changes from anywhere. You can test this…