Re:Securing your API: a modern alternative to CSRF tokens
by homakov on Wednesday June 14, 2017 @04:47PM
(#14556005)
Just checked, indeed no origin on same site. It sucks, this makes origin barely reliable.
[ Parent
| on HN ]
There are no comments on this comment yet.