{"action":"created","issue":{"url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/6","labels_url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/6/comments","events_url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/6/events","html_url":"https://github.com/technoboy10/crossorigin.me/issues/6","id":84204712,"number":6,"title":"Disagree!","user":{"login":"Hardmath123","id":5202416,"avatar_url":"https://avatars.githubusercontent.com/u/5202416?v=3","gravatar_id":"","url":"https://api.github.com/users/Hardmath123","html_url":"https://github.com/Hardmath123","followers_url":"https://api.github.com/users/Hardmath123/followers","following_url":"https://api.github.com/users/Hardmath123/following{/other_user}","gists_url":"https://api.github.com/users/Hardmath123/gists{/gist_id}","starred_url":"https://api.github.com/users/Hardmath123/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Hardmath123/subscriptions","organizations_url":"https://api.github.com/users/Hardmath123/orgs","repos_url":"https://api.github.com/users/Hardmath123/repos","events_url":"https://api.github.com/users/Hardmath123/events{/privacy}","received_events_url":"https://api.github.com/users/Hardmath123/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-06-02T20:47:18Z","updated_at":"2015-07-19T13:02:31Z","closed_at":null,"body":"> No, and I'm pretty sure it shouldn't. If crossorigin.me supported those verbs, you could do some pretty messed up stuff.\r\n\r\nThat's, uh, not how it works. The requests would be sent from your end, and as you said, you don't forward cookies (even if you *did*, what's the worst they could do?).\r\n\r\nIn any case, nobody really uses PUT and DELETE anymore. People just gave up on the whole \"semantic HTTP\" thing and use GET/POST for everything—if you're lucky, they pay attention to idempotency.\r\n\r\nPOST requests, by the way, would be incredibly useful, since so many APIs listen to them.\r\n\r\nOh, and while I'm at it about security: you should either enable a legit SSL cert on your domain (non-free with Heroku) or tell folks that they can use `atcors.herokuapp.com` for secure connections. Otherwise they're open to mitming (again, what's the worst they can do?)."},"comment":{"url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/comments/122660016","html_url":"https://github.com/technoboy10/crossorigin.me/issues/6#issuecomment-122660016","issue_url":"https://api.github.com/repos/technoboy10/crossorigin.me/issues/6","id":122660016,"user":{"login":"ansarizeeshan","id":7957173,"avatar_url":"https://avatars.githubusercontent.com/u/7957173?v=3","gravatar_id":"","url":"https://api.github.com/users/ansarizeeshan","html_url":"https://github.com/ansarizeeshan","followers_url":"https://api.github.com/users/ansarizeeshan/followers","following_url":"https://api.github.com/users/ansarizeeshan/following{/other_user}","gists_url":"https://api.github.com/users/ansarizeeshan/gists{/gist_id}","starred_url":"https://api.github.com/users/ansarizeeshan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ansarizeeshan/subscriptions","organizations_url":"https://api.github.com/users/ansarizeeshan/orgs","repos_url":"https://api.github.com/users/ansarizeeshan/repos","events_url":"https://api.github.com/users/ansarizeeshan/events{/privacy}","received_events_url":"https://api.github.com/users/ansarizeeshan/received_events","type":"User","site_admin":false},"created_at":"2015-07-19T13:02:31Z","updated_at":"2015-07-19T13:02:31Z","body":"Please tell us *...*.herokuapp.com so that we can use it for secured request"}}