News for hackers. Stuff that matters.

A comment on CORS is not meant to secure an API endpoint. Parent comment

Re:CORS is not meant to secure an API endpoint by TheCoelacanth on Sunday February 13, 2022 @02:27PM (#30324745)
The three pillars of security are confidentiality, integrity and availability.

Letting people have access to things that they are supposed to have access to is part of security. You don't get perfect security just by denying everyone access to everything.

[ Parent | on HN ]
Re:CORS is not meant to secure an API endpoint by unclebucknasty on Sunday February 13, 2022 @06:59PM (#30326915)
Agreed.
[ Parent | on HN ]