• 0 Posts
  • 3 Comments
Joined 5 months ago
cake
Cake day: June 23rd, 2024

help-circle

  • To me that is the problem and why I’ll probably cancel with this price hike. I don’t want more. I got YT Premium for YouTube, mostly to support creators, cause fuck watching Ads. But I have to pay for Music, Podcasts and whatever other garbage they try to stuff in there. It was the same with Prime. I don’t want to watch your stupid series, I just want free shipping, twitch prime and occasionally an old movie.

    Sorry for the rant but these stupid subscription “bundles” are so annoying. The whole ecosystem is becoming shittier every year.


  • Unless I’m missing something, the post is plain wrong in some parts. You can’t POST to a Cross-Site API because the browser will send a CORS preflight first before sending the real request. The only way around that are iirc form submits, for that you need csrf protection.

    Also the CORS proxy statement is wrong if I don’t misunderstand their point. They don’t break security because they are obviously not the cookie domain. They’re the proxy domain so the browser will never send cookies to it.

    Anyways, don’t trust the post or me. Just read https://owasp.org/ for web security advice.