News for hackers. Stuff that matters.

A comment on Do not let your CDN betray you: Use Subresource Integrity. Parent comment

Re:Do not let your CDN betray you: Use Subresource Integrity by nly on Thursday October 01, 2015 @03:18PM (#10313888)
Wouldn't doing this on POST be dangerous? POSTs are not expected to be idempotent, so you're trusting the server to understand and check the Origin header etc.
[ Parent | on HN ]
Re:Do not let your CDN betray you: Use Subresource Integrity by codedokode on Thursday October 01, 2015 @04:01PM (#10314221)
You can send POST to any server using a JS-submitted form so it doesn't introduce new attack vector.
[ Parent | on HN ]
Re:Do not let your CDN betray you: Use Subresource Integrity by malft on Sunday October 04, 2015 @10:17AM (#10327557)
You get slightly more power in that you can post malformed multipart stuff.
[ Parent | on HN ]