Shynet had a security issue because I misunderstood CORS

made by milesmcc, submitted by Mai
A great blog post about how making an incorrect assumption about how CORS works led to a security vulnerability in the author's self-hosted analytics tool, with a helpful reminder about the dangers of copy/pasting code!