News for hackers. Stuff that matters.

A comment on CSRF, CORS, and HTTP Security Headers Demystified. Parent comment

Re:CSRF, CORS, and HTTP Security Headers Demystified by bugmen0t on Friday April 30, 2021 @03:46AM (#26990791)
The concept of a Site is defined here https://html.spec.whatwg.org/multipage/origin.html#sites

It's basically an origin, but disregarding subdomains.

[ Parent | on HN ]

There are no comments on this comment yet.