News for hackers. Stuff that matters.

A comment on Why Static Websites Need HTTPS. Parent comment

Re:Why Static Websites Need HTTPS by austincheney on Tuesday August 28, 2018 @03:42PM (#17862191)
> You can break/disable SOP when it's trivially easy to edit the code.

How? SOP isn't related to the code. It is only concerned with the page address.

[ Parent | on HN ]
Re:Why Static Websites Need HTTPS by icebraining on Tuesday August 28, 2018 @07:00PM (#17863676)
The point is that you can put the code wherever you want, including inside the same origin context (e.g. right in the main HTML).
[ Parent | on HN ]