Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Could the proxy place further restrictions like only replacing the placeholder with the real API key in approved HTTP headers? Then an API server is much less likely to reflect it back.


It can, yes. (I don't know how Deno's work, but that's how ours works.)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: