News for hackers. Stuff that matters.
Re:Why do we have both CSRF protection and CORS? by Retr0id on Monday March 03, 2025 @07:37AM (#43241166)
Nothing prevents this, but the client must still emit preflight checks (an extra round-trip) for every endpoint, and again if headers need to change.

There are no comments on this comment yet.