GitHub really needs to step up its CORS game. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ermik on Nov 16, 2020 \| parent \| context \| favorite \| on: Show HN: I created a URL shortener that can be ent... GitHub really needs to step up its CORS game.

nelsontky on Nov 16, 2020 | [–]

I am calling GitHub's official API. APIs are not supposed to have any CORS restrictions.

detaro on Nov 16, 2020 | [–]

Why?

nelsontky on Nov 17, 2020 | [–]

Cuz they are supposed to be called by people building various apps, and it does not make sense to limit the source of the network requests

detaro on Nov 17, 2020 | | [–]

Their API allows CORS requests from everywhere, what do they need to "step up"?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact