Put.io API design issues

Re:Put.io API design issues by Sir_Cmpwn on Monday August 10, 2015 @11:30AM (#10035220)

Stop using JSONP, please! Instead, just support CORS.

[ Parent | on HN ]

Re:Put.io API design issues by simonw on Monday August 10, 2015 @12:53PM (#10035785)

CORS will not protect you against CSRF - in fact, if you don't apply it with caution it will open you up to CSRF attacks.

[ Parent | on HN ]

Re:Put.io API design issues by Sir_Cmpwn on Monday August 10, 2015 @01:29PM (#10035994)

Sorry, I wasn't necessarily saying that CORS will save you, but more suggesting that there's no reason to use JSONP.

[ Parent | on HN ]