Hacker News Reader

GitHub really needs to step up its CORS game.

I am calling GitHub's official API. APIs are not supposed to have any CORS restrictions.

Why?

Cuz they are supposed to be called by people building various apps, and it does not make sense to limit the source of the network requests

Their API allows CORS requests from everywhere, what do they need to "step up"?