News for hackers. Stuff that matters.

A comment on The Performance Cost of CORS Requests on Single-Page Applications. Parent comment

Re:The Performance Cost of CORS Requests on Single-Page Appl... by krallja on Sunday September 02, 2018 @04:45PM (#17898548)
How is that different from the unproxied scenario? If unicorngifs.sexy gets pwned, your users get pwned, whether or not there’s a proxy in the middle.
[ Parent | on HN ]
Re:The Performance Cost of CORS Requests on Single-Page Appl... by wolf550e on Monday September 03, 2018 @09:23AM (#17902440)
If you load javascript from there - yes, but if you iframe to there - no. You can design a solution that uses cross-origin browser protection to protect your users from getting owned in case a partner is compromised.
[ Parent | on HN ]