News for hackers. Stuff that matters.

A comment on CSRF, CORS, and HTTP Security Headers Demystified. Parent comment

Re:CSRF, CORS, and HTTP Security Headers Demystified by johncolanduoni on Friday April 30, 2021 @05:38AM (#26991438)
Local storage is per-origin, so anything set on an https page for a certain domain will not be readable on an http page and vice-versa.
[ Parent | on HN ]

There are no comments on this comment yet.