Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Why do we have both CSRF protection and CORS?. Parent comment
> CORS
Incorrect. It's SOP that prevents an evil.com script from going to bank.com
It's CORS that allows evil.com. CORS is an insecurity feature that relaxes the SOP.
There are no comments on this comment yet.
> CORS
Incorrect. It's SOP that prevents an evil.com script from going to bank.com
It's CORS that allows evil.com. CORS is an insecurity feature that relaxes the SOP.