3 ms·
Why do you think this bypasses CORS?
by iancarroll 10y ago
Why do you think this bypasses CORS?
- imglorp 10y agoWell, it bypasses the spirit, which was to exert some control over what got loaded into the browser via the back door. Now, malicious code can just come in the front door.
- RodgerTheGreat 10y agoIf anything it's a useful demonstration of how CORS is more theater than security for anything beyond the most trivial scenarios.
- moosingin3space 10y agoI wonder how hard it would be to come up with a "containerization" mechanism for the web so as to separate scripts/resources better.