undefined | Better HN

0 pointsorf10y ago0 comments

I assume they make a preflight HEAD request the same as CORS, in which case they would have to be very sloppy to make that count towards the stats.

0 comments

Nope. There's no preflight for X-Frame-Options, as it was designed as a click jacking prevention.

j / k navigate · click thread line to collapse

0 pointsorf10y ago0 comments

I assume they make a preflight HEAD request the same as CORS, in which case they would have to be very sloppy to make that count towards the stats.

Nope. There's no preflight for X-Frame-Options, as it was designed as a click jacking prevention.

j / k navigate · click thread line to collapse