Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The request is sent by the browser, not the webapp itself (ie. using xhr or fetch) so it doesn't have headers like "Origin" added.


Ha! Thank you, I misunderstood who was behind this proposal but since it's W3C it's something that would directly be implemented by the browser itself.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: