4 ms·
When I played around with XMLHttpRequest to a locally running Jupyter server I got the following error: No 'Access-Control-Allow-Origin' header is present on
by petters 10y ago
When I played around with XMLHttpRequest to a locally running Jupyter server I got the following error:
No 'Access-Control-Allow-Origin' header is present on the requested resource.
It seems that should have prevented this exploit as well?
- deleted 10y ago[deleted]
- marksamman 10y agoIt can be bypassed with DNS rebinding.
- petters 10y agoI did a test with packet capture just now and "Access-Control-Allow-Origin" does not prevent the request from being made, just preventing the JavaScript from getting the response back.