3 ms·
Browsers are ubiquitous, and they run third party code. That would be a deadly combination for anyone hoping to launch a DDOS attack if CORS protections didn't
by untog 7y ago
Browsers are ubiquitous, and they run third party code. That would be a deadly combination for anyone hoping to launch a DDOS attack if CORS protections didn't exist.
- chpmrc 7y agoThe same could be said about operating systems. In fact when just replacing "Browsers" with "Operating systems" your sentence would still hold true.
- untog 7y agoNot really. Third party code that you haven't installed does not run in an operating system at the click of a button. It does in the browser. By the logic you're outlining there's no reason to sandbox a browser at all, since it's no different to an operating system. Experience suggests that would not be wise.