News for hackers. Stuff that matters.

A comment on Why do we have both CSRF protection and CORS?. Parent comment

Re:Why do we have both CSRF protection and CORS? by IgorPartola on Sunday March 02, 2025 @02:38PM (#43234147)
By definition those do allow you to see the response so that’s not really what is being discussed.
[ Parent | on HN ]
Re:Why do we have both CSRF protection and CORS? by Muromec on Sunday March 02, 2025 @03:06PM (#43234473)
Not really. You as an application generally can't read across origin boundaries, but you can ask browser to show it to the user.
[ Parent | on HN ]