News for hackers. Stuff that matters.

A comment on Cache your CORS. Parent comment

Re:Cache your CORS by javier2 on Tuesday September 20, 2022 @02:22PM (#32915813)
CORS is something I 'fixed' once, five years ago. Hard to talk in detail about that anymore. I wish we would have the time to implement it safely, but alas. We still can't produce an allowList of allowed domains :/
[ Parent | on HN ]
Re:Cache your CORS by LanceH on Thursday September 22, 2022 @06:21PM (#32945384)
> CORS is something I 'fixed' once, five years ago

I'm careful that I don't demand anyone go into depth on any particular subject. CORS is just one opportunity that seems to need a fix with every new project. It also has a variety of solutions, which is again opportunity to show what they know.

There is little point in looking for what a client doesn't know. I've got that covered.

[ Parent | on HN ]