In this day and age there's nothing to stop people running Adblock if they really don't want to see ads. This would be easier in the longer term for the person anyway (haxxly proxying to CNN is slower than going to CNN directly w/ Adblock).
Regardless, I'll cross that bridge if/when it comes up. Site terms are here: http://www.haxx.ly/terms
I've given some thought to that - it uses the same mechanisms as jsfiddle (different domains) and you can view the haxx code. As such CSRF should be fine and SSL isn't supported on public haxxlies.
I however, wouldn't recommend signing in through the service :)
Yep. Private plans + a whole raft of other features I didn't have time to implement (SSL support, regex substitution on html, basic auth support etc etc). Any other suggestions?
The haxxlys run in an iframe on a separate domain to haxx.ly (similar to jsfiddle) to prevent you from hacking haxxly with haxxly.
You could use it to phish with but there is a giant banner saying this website is from haxxly and is altered. Also you can view the code yourself and flag it if it's bad.
The actual code for that haxxly doesn't do anything (well - it attempts to load jquery and sets the font tag to arial). Check out http://www.haxx.ly/h/28 for a quick example.
The 406 is the view counter just reporting you've viewed the page. The script error was an error on that particular haxxly.
Regardless, I'll cross that bridge if/when it comes up. Site terms are here: http://www.haxx.ly/terms