News for hackers. Stuff that matters.

A comment on Why do we have both CSRF protection and CORS?. Parent comment

Re:Why do we have both CSRF protection and CORS? by bastawhiz on Monday March 03, 2025 @10:07AM (#43242447)
It's only necessary to store the login token if your backend is on a different origin than your SPA is served from. It's not especially hard to avoid this.
[ Parent | on HN ]

There are no comments on this comment yet.