Re:#1 CSRF Is A Vulnerability In All Browsers
by nbpoole on Saturday March 31, 2012 @09:37AM
(#3780268)
The CORS standard for 'simple' POSTs is no different than what you can already submit via a form from a technological perspective. In that way, it actually makes a lot of sense.
And the whole point of CORS is that some websites do want to make those requests. ;-)
And the whole point of CORS is that some websites do want to make those requests. ;-)