Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
bawolff
on June 26, 2024
|
parent
|
context
|
favorite
| on:
Polyfill supply chain attack hits 100K+ sites
CORS is not required to run third party scripts. Cors is about reading data from third parties not executing scripts from third parties.
(Unless you set a Cross-Origin Resource Policy header, but that is fairly obscure)
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
(Unless you set a Cross-Origin Resource Policy header, but that is fairly obscure)