News for hackers. Stuff that matters.

A comment on Server-generated JavaScript responses. Parent comment

Re:Server-generated JavaScript responses by dhh on Tuesday December 10, 2013 @10:07PM (#6885643)
It relies on a header, which can't be set through the attack vector, so it's all kosher.
[ Parent | on HN ]
Re:Server-generated JavaScript responses by homakov on Wednesday December 11, 2013 @06:05AM (#6886985)
Since we are on the same page, could you help me in this discussion with nzkoz? https://github.com/rails/rails/issues/11509 we're talking about different things
[ Parent | on HN ]