Niko Fischer personal blog
CORS is not meant to secure an API endpoint
CORS does not secure your API: why browser-side API keys are unsafe, and how to protect Drupal JSON:API endpoints with proper authentication.
- Points
- 220
- HN comments
- 154
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2022
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Feb 13, 2022 | CORS is not meant to secure an API endpoint by Yabasta | 220 | 154 |
