News for hackers. Stuff that matters.

A comment on Blizzard games were vulnerable to DNS rebinding attack. Parent comment

Re:Blizzard games were vulnerable to DNS rebinding attack by michaelermer on Monday January 22, 2018 @07:00PM (#16209431)
And/or simply implement CORS headers.
[ Parent | on HN ]
Re:Blizzard games were vulnerable to DNS rebinding attack by kentonv on Monday January 22, 2018 @10:26PM (#16210721)
No, CORS doesn't apply here. CORS regulates cross-origin requests, but the attack here makes the browser think the requests are same-origin.

(Also, CORS can only be used to permit access that would normally be denied. CORS does not offer any way to deny access that is normally permitted.)

[ Parent | on HN ]