Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
gf000
37 days ago
|
parent
|
context
|
favorite
| on:
Developers don't understand CORS (2019)
Well, it's easy to "not trust yourself" when you have user-submittable content that you display for other users. Sure, one
should
absolutely sanitize it, but layered security is important.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: