4 ms·
I call BS, it's the responsibility of the server to check Host headers and implement CORS. All browser provide these security measurements. There are valid use
by michaelermer 9y ago
I call BS, it's the responsibility of the server to check Host headers and implement CORS. All browser provide these security measurements. There are valid use cases for having domain aliases for local ips.
- benchaney 9y ago> There are valid use cases for having domain aliases for local ips. My preferred solution doesn't prevent this, and in fact it is preferred partially because some of the other solutions do.