Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Why does Google append while(1); in front of their JSON responses?. Parent comment
> safely, even with private data if things are configured right.
CORS does nothing to prevent CSRF attacks, see[1]. We still need to protect against CSRF.
[1]http://www.w3.org/TR/cors/#security
There are no comments on this comment yet.
> safely, even with private data if things are configured right.
CORS does nothing to prevent CSRF attacks, see[1]. We still need to protect against CSRF.
[1]http://www.w3.org/TR/cors/#security