4 ms·
Well, a script should be able to set of a naked HTTP request to `othersite.com` without sending along the cookies for `othersite.com`. I don't see how that woul
by captainmuon 12y ago
Well, a script should be able to set of a naked HTTP request to `othersite.com` without sending along the cookies for `othersite.com`. I don't see how that would allow new vulnerabilities.
Basically, make XMLHttpRequest not use any cookies etc. when making requests to other domains.
- EGreg 12y agoYes without cookies it should be able to, since it can via a proxy. this should be a capability of browsers