35 ms·
> If it was technologically possible It's actually pretty easy, you can start chrome with --disable-web-security flag [1] > I also think you could argue "What
by thinkloop 8y ago
> If it was technologically possible
It's actually pretty easy, you can start chrome with --disable-web-security flag [1]
> I also think you could argue "What if outline loaded articles in an iframe?"
I'm sure this would be legal as it's equivalent to loading the site in a tab. The parent site wouldn't be able to manipulate any of the content/ads/paywalls/functionality, and the content site gets the full hit.
[1] https://stackoverflow.com/questions/3102819/disable-same-origin-policy-in-chrome https://stackoverflow.com/questions/3102819/disable-same-ori...
- dorgo 8y ago> The parent site wouldn't be able to manipulate any of the content/ads/paywalls/functionality What? What do we disable CORS for if not to allow Javascript from one domain manipulate content in an iframe of an other domain? Am I missing something?
- thinkloop 8y agoDisabling CORS would allow you to make straight requests to foreign content from your site and manipulate the responses exactly as though they came from your own servers - no iframe needed. CORS does not disable iframe sandboxing.