Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> client browsers have no "idea" of subdomains, either.

They have. That's why PSL list exists. It applies to all CSP rules.

> if i have example.com login saved,

It's the passsword wallet thing. It uses different rules and have no standards



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: