Stranger Sending chats on my unfinished/un published webpage

rjlysspro

Opened up my website I'm working on today and found some random person had spammed my chat, which is in sandbox mode not on a domain yet. Please explain how this is possible and how did he find my chat, this seems like a security risk now.

Francesco Vasco

The Now4real Sandbox is a particular chat shared between all developers.
It is a special context restricted to developers only, so you can meet other developers or test different cases (e.g. two users on the same chat).
This behavior has been described here: https://now4real.com/quickstart/#sec-lets-play

I confirm you this is a Now4real feature.
Now4real has never access to local files, the chat is controlled server side.

Alessandro

May you please confirm if you are referring to a chat hosted on pages served under your domain or pages loaded from local files or localhost?
If it's the latter, then what Francesco said applies: you are working on the shared sandbox.
If it's the former, let's speak further.

rjlysspro

If it’s in sandbox mode and it’s as Francesco says then it makes sense. It is currently in sandbox mode. Once I make the website live it changes to domain correct?

Francesco Vasco

rjlysspro Once I make the website live it changes to domain correct?

Yes, it does.