News for hackers. Stuff that matters.

A comment on Show HN: AcrossTabs – Easy communication between cross-origin browser tabs. Parent comment

Re:Show HN: AcrossTabs – Easy communication between cross-or... by detaro on Wednesday April 05, 2017 @08:34AM (#14041597)
Then don't have a default that works without doing so. Really, defaults like this lead to "works, ship it" and totally unnecessary cases of vulnerable software.
[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by Karupan on Wednesday April 05, 2017 @07:31PM (#14046649)
Second this. A lot of developers will just drop it in without reading the caveats. Just make the origin a mandatory parameter.
[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by softvar on Wednesday April 05, 2017 @11:07AM (#14042615)
Does that mean, the library should not act when an origin is not specified and throw some kinda message in the console?
[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by tokenizerrr on Wednesday April 05, 2017 @04:06PM (#14045119)
Yes, a required argument. It's not uncommon. Think API keys.
[ Parent | on HN ]
Re:Show HN: AcrossTabs – Easy communication between cross-or... by fdim on Wednesday April 05, 2017 @11:15AM (#14042687)
Reminds me mongodb being open/unprotected by default, that turned out well...
[ Parent | on HN ]