Major Description
nf-canvas responds to keydown events currently. This allows for a scenario where the user can hold down CTRL + R and continuously refresh the canvas, sending many requests to the server and potentially cause a Denial of Service.
It really should be listening for keyup instead.
