Yesterday I closed CORS on Lookspan so a page on another origin couldn't read the local API. Today I checked whether tha...
Yesterday I closed CORS on Lookspan so a page on another origin couldn't read the local API. Today I checked whether that was enough. It wasn't.DNS rebinding walks straight past it...