News for hackers. Stuff that matters.

A comment on Blizzard games were vulnerable to DNS rebinding attack. Parent comment

Re:Blizzard games were vulnerable to DNS rebinding attack by kentonv on Monday January 22, 2018 @10:26PM (#16210721)
No, CORS doesn't apply here. CORS regulates cross-origin requests, but the attack here makes the browser think the requests are same-origin.

(Also, CORS can only be used to permit access that would normally be denied. CORS does not offer any way to deny access that is normally permitted.)

[ Parent | on HN ]

There are no comments on this comment yet.