3 ms·
I feel like something is rather wrong with the security model that allows origin A to render a filtered version of a non-CORS-authorized image from origin B. W
by amluto 3y ago
I feel like something is rather wrong with the security model that allows origin A to render a filtered version of a non-CORS-authorized image from origin B. Why is this useful? (Other than enabling awesome attacks like this.)