News for hackers. Stuff that matters.
Re:Securing your API: a modern alternative to CSRF tokens by homakov on Wednesday June 14, 2017 @04:47PM (#14556005)
Just checked, indeed no origin on same site. It sucks, this makes origin barely reliable.

There are no comments on this comment yet.