Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Claude's API now supports CORS requests, enabling client-side applications. Parent comment
If you work somewhere with a network access based intranet you might have eg a private wiki at https://wiki.internal-corp/
Without CORS, anyone from your company visiting a malicious external website could have data stolen from that “private” intranet site using fetch()
There are no comments on this comment yet.
If you work somewhere with a network access based intranet you might have eg a private wiki at https://wiki.internal-corp/
Without CORS, anyone from your company visiting a malicious external website could have data stolen from that “private” intranet site using fetch()