Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
spr-alex
3 months ago
|
parent
|
context
|
favorite
| on:
A proposal to restrict sites from accessing a user...
The existing PNA is easily defeated for bugs that can be triggered with standard cross origin requests. For example PNA does nothing to stop a website from exploiting some EOL devices I have with POST requests and img tags.
This is a much better approach.
Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
This is a much better approach.