Re:Developers don't understand CORS (2019)
by Beltiras on Sunday June 21, 2026 @07:41AM
(#48618019)
Every ad GET is doing a lot of things that violate that edict.
[ Parent
| on HN ]
Yes, but if ads do it, that would at worst make the ad server vulnerable, not your server.
You apparently understand less than me. The little I do understand is that CORS is protection for a site's user, not the site.