4 ms·
Actually, I agree with OP. Grandparent's phrasing: > All of this is completely wrong. Is not only needlessly argumentative but also wrong itself. The 3rd poin
by blurker 5y ago
Actually, I agree with OP. Grandparent's phrasing:
> All of this is completely wrong.
Is not only needlessly argumentative but also wrong itself. The 3rd point they include as "completely wrong" is not wrong, and they end up just rephrasing it later in their correction.
- JimDabell 5y ago> The 3rd point they include as "completely wrong" is not wrong It is: > With cURL, no CORS takes effect, so the attacker has direct access with the full rights of the user. The attacker has direct access with the full rights of the user because this is not a situation where one origin is making a request for a resource from another origin, so there’s nothing that says this shouldn’t happen. It’s got absolutely nothing to do with CORS at all.