News for hackers. Stuff that matters.

A comment on Mastershot – Web based video editor. Parent comment

Re:Mastershot – Web based video editor by lights0123 on Sunday June 06, 2021 @05:46PM (#27416646)
Chrome needs the same headers too since Chrome 91, as it was violating CORS without requiring them.
[ Parent | on HN ]
Re:Mastershot – Web based video editor by arkadiyt on Sunday June 06, 2021 @06:30PM (#27416957)
It does not require CORS (cross origin resource sharing), it requires COEP/COOP.
[ Parent | on HN ]
Re:Mastershot – Web based video editor by lights0123 on Sunday June 06, 2021 @10:19PM (#27418311)
Yes, but because it did not require COEP/COOP, it allowed websites to break CORS policies through Spectre.
[ Parent | on HN ]