3 ms·
The easy and obvious solution to info leakage and XSRF is for the web standards committee to ban third party cookies from being sent in cross-origin requests. B
by jimbo1qaz 8y ago
The easy and obvious solution to info leakage and XSRF is for the web standards committee to ban third party cookies from being sent in cross-origin requests. But that would break Facebook Like buttons from tracking your browsing activity...
- tptacek 8y agoIt's probably not reasonable to assert that tracking is the reason we have cross-origin requests; that feature was avidly requested by developers across the spectrum for many years, and the fact of JSONP is a pretty good illustration of just how badly people wanted it.