Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Blocking XHR requests by default would probably be a good start before 1st party JS. I already default to blocking 3rd party content.


That's true, depends on the kind of blog though, and whether it's a SPA or not.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: