4 ms·
The point being, presumably, the page author explicitly chose to include a cross-domain script
by edoceo 2y ago
The point being, presumably, the page author explicitly chose to include a cross-domain script
- Muromec 2y agoThe script author however didn't. CORS is more about the remote giving consent to exfiltrate the data than it is about preventing injecting the data into it. You can always reject the data coming in