News for hackers. Stuff that matters.

A comment on Put.io API design issues. Parent comment

Re:Put.io API design issues by simonw on Monday August 10, 2015 @12:53PM (#10035785)
CORS will not protect you against CSRF - in fact, if you don't apply it with caution it will open you up to CSRF attacks.
[ Parent | on HN ]
Re:Put.io API design issues by Sir_Cmpwn on Monday August 10, 2015 @01:29PM (#10035994)
Sorry, I wasn't necessarily saying that CORS will save you, but more suggesting that there's no reason to use JSONP.
[ Parent | on HN ]