| ▲ | inigyou 4 hours ago | |
But the people you're defending against don't do that. They also don't load CSS but for some reason the security theater PoW won the mindshare. | ||
| ▲ | econ 4 hours ago | parent | next [-] | |
I once discover you can put escaped XML or json in css content. The purpose was to have static data sets that work cross domain. No headers to configure no letting strangers run all you can eat malicious js on your site. | ||
| ▲ | antonvs 2 hours ago | parent | prev [-] | |
Security theater is what gets the economic rewards. | ||