you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 10 months ago (7 children)

I remember there being a CORS problem in a team project.
Perhaps I should ask the webdev at the time whether they had made that thing with AI or they really just made the whole thing themselves and somehow overlooked CORS.

  • source
  • hideshow 7 child comments
  • [–] 8 points 10 months ago (1 child)

    Cors was usually not part of any tutorials. To new people it was more of an afterthought, just set policy to get you page to work.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 10 months ago

    Hehe yeah, security in general has been an afterthought in the computing space.
    And it makes sense. You first make something possible, then restrict it for whatever cases you don't want it happening. The latter is supposed to be easier.

  • source
  • parent
  • [–] 4 points 10 months ago (3 children)

    When I was learning, CORS was a pain in my ass. It’s not taught well, and often glossed over.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 10 months ago (2 children)

    So I guess AI and hence, vibe coders are having the same problems as normal programmers.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 10 months ago (1 child)

    It could be either way, I haven’t tried “vibe coding” but I imagine you’re right if you don’t tell it to explicitly deal with CORS, AI probably doesn’t

  • source
  • parent
  • hideshow 1 child comment