Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Cuz they are supposed to be called by people building various apps, and it does not make sense to limit the source of the network requests


Their API allows CORS requests from everywhere, what do they need to "step up"?




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: