显然，CodePen 2.0 在你输入时会将数据发送到他们的服务器。
20 分•作者: maxim-fin•19 天前
他们几乎会立即将所有输入到编辑器中的内容发送到 codepen.dev（在你输入秘密信息后 1-2 秒内，你就会在相应的网络/响应选项卡中看到它出现），甚至在你保存之前。我用一个独特的标记进行了测试：在 index.html 中输入该标记后，CodePen 运行了一个带有“save:false”的构建，然后该标记就完整地出现在了从生成的“*.codepen.dev 预览”中提供的 HTML 中。因此，如果你不小心在那里输入了任何秘密信息，即使你没有发布/保存该 pen，也请考虑它们已被泄露。
查看原文
They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it. I tested this with a unique marker: after typing it into index.html, CodePen ran a build with "save:false", and the marker then appeared verbatim in the HTML served from the generated "*.codepen.dev preview". Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen