News for hackers. Stuff that matters.

A comment on CSRF, CORS, and HTTP Security Headers Demystified. Parent comment

Re:CSRF, CORS, and HTTP Security Headers Demystified by hsbauauvhabzb on Friday April 30, 2021 @02:46AM (#26990491)
Any good references on the definition? I’ve always found it awkward.
[ Parent | on HN ]
Re:CSRF, CORS, and HTTP Security Headers Demystified by bugmen0t on Friday April 30, 2021 @03:46AM (#26990791)
The concept of a Site is defined here https://html.spec.whatwg.org/multipage/origin.html#sites

It's basically an origin, but disregarding subdomains.

[ Parent | on HN ]