News for hackers. Stuff that matters.

A comment on Show HN: I made a privacy-first minimalist Google Analytics. Parent comment

Re:Show HN: I made a privacy-first minimalist Google Analytics by wnevets on Wednesday September 19, 2018 @11:02AM (#18024647)
> like sending requests as JSON requires an extra (pre-flight) request, so in my script I use the "text/plain" content type, which does not require an extra request.

what are the security implications of this?

[ Parent | on HN ]
Re:Show HN: I made a privacy-first minimalist Google Analytics by cevn on Wednesday September 19, 2018 @11:49AM (#18025071)
He's talking about skipping CORS by using a "plain" request. Avoiding CORS is not a huge security vulnerability afaik.
[ Parent | on HN ]