2 ms·
> I forgot what made github.com switch to github.io. Something similar but totally separate. Same reason: to prevent user-generated/user-hosted content from be
by DaiPlusPlus 6y ago
> I forgot what made github.com switch to github.io. Something similar but totally separate.
Same reason: to prevent user-generated/user-hosted content from being able to read GitHub.com cookies.
- kevincox 6y agoNot quite, they couldn't read the cookies. But they could mess with the cookies on github.com somewhat. The fully writeup is here: https://github.blog/2013-04-09-yummy-cookies-across-domains/ https://github.blog/2013-04-09-yummy-cookies-across-domains/