3 ms·
Sure, but moving your whole app under a single origin to avoid dealing with CORS doesn't weaken any protection here.
by jefftk 5y ago
Sure, but moving your whole app under a single origin to avoid dealing with CORS doesn't weaken any protection here.
- zemnmez 5y agoif handled correctly, sure. but it also means that implicit cookie authentication ('ambient authority') is possible and can easily happen by accident