Re:GitHub hit by DDoS attack
by NoCowLevel on Friday March 27, 2015 @07:07AM
(#9275574)
Very interesting defense. It seems that it works because the attacking AJAX call is done with content dataType 'script'. I don't think it'll be too hard for the attacker to fix that.
[ Parent
| on HN ]
Re:GitHub hit by DDoS attack
by teknologist on Friday March 27, 2015 @07:21AM
(#9275614)
It's either that or call a jsonp endpoint, which could still throw up the alert. CORS protects standard AJAX from requesting anything outside the current domain.