News for hackers. Stuff that matters.

A comment on Looking at how many sites use vulnerable JavaScript libraries. Parent comment

Re:Looking at how many sites use vulnerable JavaScript libra... by thefreeman on Wednesday November 22, 2017 @04:51PM (#15761016)
Not really. CORS headers are set by the destination of the XHR. In the case of XSS it would be an attacker controlled server used to exfiltrate user cookies, etc.
[ Parent | on HN ]

There are no comments on this comment yet.