News for hackers. Stuff that matters.

A comment on Show HN: I created Make.rs – a place where makers show what they've made. Parent comment

Re:Show HN: I created Make.rs – a place where makers show wh... by DrOctagon on Wednesday April 28, 2021 @03:26AM (#26966696)
I had a similar issue once with an app hosted on Azure. Large images were triggering the WAF sometimes as a ‘chunk’ of the image would falsely match a default firewall rule.

The CORS error was because the ‘request blocked’ response was a html page without cross origin headers.

Worth checking for that

[ Parent | on HN ]
Re:Show HN: I created Make.rs – a place where makers show wh... by dalmo3 on Wednesday April 28, 2021 @05:24PM (#26974407)
Yes, I've seen this same issue with AWS lambdas. Browser reports CORS errors but sending the same request with Postman returns HTTP500, which made me realise it was a malformed request.
[ Parent | on HN ]
Re:Show HN: I created Make.rs – a place where makers show wh... by MucuMare on Wednesday April 28, 2021 @03:51AM (#26966842)
Very interesting, thanks for the pointer, much appreciated. I was suspecting it has to do with uploading large images but your comment made it clear where to look at now.
[ Parent | on HN ]