Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
dboreham
3 months ago
|
parent
|
context
|
favorite
| on:
Developers don't understand CORS (2019)
The only thing to understand is that it does nothing useful today.
kristiandupont
3 months ago
|
next
[–]
What do you mean? It's a way to mitigate a certain attack vector and as far as I can tell, it works as intended given the circumstances it was designed under.
paulryanrogers
3 months ago
|
prev
[–]
Doesn't it help protect clients from malicious 3P JS?
At least so long as they don't have malicious extensions or a non-CORS browser?
Consider applying for YC's Winter 2027 batch!
Applications
are open till November 2.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
