3 ms·
Implementing "frictionless sharing" with POST doesn't look trivial to me, because browsers treat cross-domain POST requests more strictly than GET.
by cousin_it 15y ago
Implementing "frictionless sharing" with POST doesn't look trivial to me, because browsers treat cross-domain POST requests more strictly than GET.
- fleitz 15y agoThe javascript would just have to create a form and submit it. Not a big problem at all. Alternatively, create an iframe in which the form is autosubmitted via javascript.
- cousin_it 15y agoDoesn't that break the back button, making it no longer "frictionless"?
- wycats 15y agoWhat makes you think that? CSRF vulnerabilities are possible precisely because cross-domain POST requests can be created without violating the cross-domain policy.