alt Hacker NewsThe only thing to understand is that it does nothing useful today.
Replies
paulryanrogers • today at 3:43 AM
Doesn't it help protect clients from malicious 3P JS?
At least so long as they don't have malicious extensions or a non-CORS browser?
The only thing to understand is that it does nothing useful today.
Doesn't it help protect clients from malicious 3P JS?
At least so long as they don't have malicious extensions or a non-CORS browser?
What do you mean? It's a way to mitigate a certain attack vector and as far as I can tell, it works as intended given the circumstances it was designed under.