Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah it makes a lot of sense to do it this way, however it does not feel that nefarious when there were plausable workarounds anyway.


Browser could implement finer grain permissions (i.e. only permit the API use for a given top level path regexp) but I bet most users won't bother fine tuning their grants.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: