我应该阻止用户选择哪些子域?
我们正在创建一款符合当今趋势的应用程序,让用户选择自己的子域。
xxx.company.com
随着这种情况变得越来越普遍,最好编制一个子域列表,应防止用户出于技术/安全原因(例如:www
)或礼仪(例如:性别
)。
这个问题是社区维基,所以请编辑以添加您的建议。
We're creating one of those apps which is trend-of-the-day-compliant, letting users select their own subdomain.
xxx.company.com
As this is becoming common, it would be good to compile a list of subdomains which should be prevented from allowing users to select either for technical/security reasons (eg :www
) or etiquette (eg: sex
).
This question is community wiki, so please edit to add your suggestions.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(5)
只是关于建议过滤脏话的说明。
一般来说,只有当您确实确定目标受众的母语时,脏话过滤器才有意义。否则,您可能会让您的国际客户生气:可能有些英语单词在另一种语言中是亵渎的(没有机会找到所有这些单词),而您过滤掉的单词在其他语言中可能是完全有效的单词。当《模拟人生 3》发布时,EA 论坛过滤掉了“damit”一词,但他们在本地化论坛上也这样做了,而“damit”在德语中是一个非常常见的词。这使得写任何东西都变得困难。 “性”在瑞典语中也有“六”的意思。
如果仅涉及子域,这可能是问题,也可能不是问题。我只是要小心,并且仅出于技术和安全原因(或诸如您自己的商标/产品之类的原因)而阻止单词。
明智的做法可能是为没有任何子域的用户事物使用特殊域,并为您需要的任何子域使用不同的域。这样,您根本不需要阻止“用户”域上的子域名。
Just a note about the suggested filtering of profanity.
In general, a profanity filter only makes sense if you are really sure about the native language of the target audience. Otherwise you may make your international customers angry: There may be English-language words that are a profanity in another language (no chance to find all of them), and words you filter out may be perfectly valid words in other languages. When Sims 3 was released, the EA forums filtered out the word "damit", but they did that on the localized forums as well, and "damit" is a very common word in German. This made it hard to write anything. "Sex" also means "six" in Swedish.
This may or may not be an issue if it's just about subdomains. I'd just be careful and rather only block words for technical and security reasons (or things like your own trademarks/products or something).
It may be wise to use a special domain for the user things that does not have any subdomains, and use a different domain for whatever subdomains you need. This way, you wouldn't need to block subdomain names on the "user" domain at all.
以及任何被视为亵渎的词语(此处未列出,以保护无辜者)
And any words considered as profanity (not listed here to protect the innocent)
我们有一个聪明的用户注册了
localhost
。可能是一个真正的安全问题。还有
dns
We have a clever user who registered
localhost
. May be a real security issue.also
dns