Subject: [httpwg/http-extensions] "confused deputy" (#536)

From: HTTP issue updates <[email-masked]>
Date: Tue, 27 Mar 2018 06:30:55 -0700

> to avoid the "confused deputy" problem

No, it's to avoid leaking private information. Servers can still be susceptible to the confused deputy problem with CORS. They need to address that independently.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpwg/http-extensions/issues/536