Yes, but if ads do it, that would at worst make the ad server vulnerable, not yo... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

xg15 45 days ago | parent | context | favorite | on: Developers don't understand CORS (2019)

Yes, but if ads do it, that would at worst make the ad server vulnerable, not your server.

Beltiras 45 days ago [–]

You apparently understand less than me. The little I do understand is that CORS is protection for a site's user, not the site.

TeMPOraL 45 days ago | [–]

It's a protection of site's business model.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact