SomeLuigi (2016-06-16 12:41:05)

---

Greetings

Today, at the request of CA (NodePoint),

I have added a way for external sites to access the resources of 3DSPlaza, through JavaScript.

Of course, this is naturally fairly dangerous, which is why I decided to implement it using a whitelist, so the users can choose what origins to trust.

An origin is formatted like: http://olivierwhiskey.tk , and can be used to refer to sites or browser extensions (dependent upon browser)

---

Information for Users
• Enabling CORS is risky, since the origin can potentially make any action under your account if you log in.
• Therefore, it is advised that you only add trusted origins to your whitelist.
• You will be liable for actions that a whitelisted origin makes on your behalf, whether you directly requested the action or not.
• Origins are white-listed per-browser, as they are stored in a cookie.
• You can also save and load your whitelist to and from your account using the CORS Unlocker tool.

---

Information for Developers
• You can ask a user to add your origin to their whitelist by sending them to a URL such as http://3dsplaza.com/util/corsunlock.php?unlock=http://olivierwhiskey.tk.
• You can view a demo, with username detection and error detection here.
• If you only want to know whether the user is logged in or not, and their username, you can make a request to http://3dsplaza.com/util/corsunlock.php?test.
• You can learn more about CORS here: http://www.html5rocks.com/en/tutorials/cors/.
• This still is not an API; you will have to do all the HTML scraping, etc. yourself, I'm afraid.

---

Potential Applications
• Improved chat front-end
• Advanced moderation tools


CORS Unlocker Tool

This post has been edited one or more times, the last time was:
2016-06-16 12:46:23

---

Gumball (2016-06-16 12:45:49)

---

Awesome.

---

Metro3ds (2017-07-10 06:54:24)

---

Stop speaking french plz

---