News for hackers. Stuff that matters.
Re:Tell HN: Thank you for not redesigning Hacker News by oefrha on Monday September 02, 2019 @04:16AM (#20857536)
> the js request via Ajax already has an additional header field

No, X-Requested-With is a non-standard header set by frameworks like jQuery. But it’s trivial to set something like that with either XHR or fetch.

Re:Tell HN: Thank you for not redesigning Hacker News by iforgotpassword on Monday September 02, 2019 @06:05AM (#20858002)
Thanks for the heads up. The only time I came in contact with actual web dev was indeed jQuery, and the couple other times I looked at the dev tools might have been pages using it as well.