Last Updated: September 27, 2021
·
662
· pazthor

Si alguna vez quieren saltarse el CORS para probar con datos de producción

google-chrome --disable-web-security --incognito --allow-cross-origin-auth-prompt --user-data-dir=~/whatever/

Have a fresh tip? Share with Coderwall community!

Post
Post a tip
Related Tags
#web
#
Did you know?

The website is part of the attack surface, not only the API behind it. Every script, iframe, and tag on a public page is code that did not go through the same review as the backend.

Security insights from Cside