Rack CORS is fundamentally insecure | Hacker News Reader