Hacker News new | comments | show | ask | jobs | submit login

I feel like the browser could use the Content-Type header to check whether the response is JSON or actual executable javascript - throwing an error if the former



Applications are open for YC Summer 2018

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact

Search: