Hacker News Reader

Insane to think an app on your phone can request the demo page to see the details.

I assume they have CORS setup properly to not allow any old JS to scrape it, they would have to explicitly allow origins access for that.

View on HN

I believe a native mobile app would be able to make the request and scrap the data, regardless of CORS. Because basically no suspicious information is transmitted, it'd be pretty easy to squeeze past an app store review.

Of course, you could buy one of these services and have access, too.

CORS is strictly browser-side enforced, so yes - any app can make this query and scrape the response.

Reply on news.ycombinator.com