Hacker News new | ask | show | jobs
by mr_toad 40 days ago
It’s mostly for backwards compatibility. Sites don’t always check the request origin, the browser SOP mitigates that problem on behalf of the user.