The attacker can be on the LAN though.

Sure but security isn’t about being 100% protected which is impossible, but lowering your attack foot print. Unless you have a ton of people hooking to your LAN regularly then this still greatly lowers you chances of getting hit with this particular security flaw by people on the WAN

A useful target might be university networks, although IIRC our university printers weren’t available for discovery. Instead we would send our documents to a special email that would forward it to a local print server so we could get charged for it.

Heynote exists as a web app as well :)

https://app.heynote.com/

Heynote also exists as a web app: https://app.heynote.com/

Can I self hosted this ?

Looking at the GitHub repo[0], I don't see why you wouldn't be able to host it yourself (extra configuration may be required). In the package.json, there is a script for running the web app `npm run webapp:build`, so I'd assume you could do that and then host the built web app in ./webapp/dist however you'd like.

[0]: https://github.com/heyman/heynote

Yep, that should work!

Will you provide an official Docker image in the GitHub Registry or Docker Hub? Thank you.

> It seems like the save delay is a bit too long.

This is now fixed by making sure the buffer is flushed on reload / exit. Should be released in a beta version in a couple of minutes. Turn on the beta channel in Heynote's settings if you want to update to it right away.

2. Only Match blocks evaluate, and it's likely to stay that way.

Here's another web-based one: https://www.turo.io/

> I don't like software that connects to internet for no good reason.

It makes HTTP requests to fetch current exchange rates (for currency conversion) and to check for updates.

> I don't want your app to check for updates, I'll decide if and when I'd like to update it.

It still requires user interaction to actually apply the update.

> I'd like to know where that info is getting stored on FileSystem

See https://github.com/heyman/heynote?tab=readme-ov-file#where-i...

It shouldn't be hard to fork it and disable currencies and auto updates. However, it sounds like Heynote might not be a good fit for you :).

I didn't put too much consideration into picking a license. If someone has compelling arguments for why I should license it differently, I would absolutely consider it.

If you want to make commercial profit unlikely but encourage contributions and widespread use, GPL would probably work better than Commons Clause.

The Math blocks are powered by Math.js (https://mathjs.org/).

Oh good catch. When I added linux support yesterday, I updated the download button, but I forgot to update the Ctrl/Cmd button. Should be fixed now.

I'll also fix the "⌥" in the editor. Thanks!

Correct.

For the paranoid it should be simple to fork Heynote and disable currencies and auto updates.