Hacker News new | ask | show | jobs
by detaro 2046 days ago
Their API allows CORS requests from everywhere, what do they need to "step up"?