News for hackers. Stuff that matters.

A comment on HTTP Security Headers – A Complete Guide.

Re:HTTP Security Headers – A Complete Guide by Grollicus on Thursday July 18, 2019 @09:15AM (#20469411)
Should mention for Access-Control-Allow-Origin that the default value is the safe default and setting this header weakens site security.
[ Parent | on HN ]
Re:HTTP Security Headers – A Complete Guide by BCharlie on Thursday July 18, 2019 @09:18AM (#20469432)
Great point! I added a sentence to say that the default is all that's needed.
[ Parent | on HN ]