Huh, I never looked but always assumed this was proxying through the controller.
It does this most of the time, either through the cloud or direct to the controller. But during setup of the first device on a network it does something direct from the browser to get it connected to the cloud.
Re:Why Is This Website Port Scanning Me?
by SmallPeePeeMan on Wednesday May 20, 2020 @11:03AM
(#23247681)
How is this different than the admin page for any other router brand? (SPA does not seem relevant to this discussion)
But I think if same-origin were enforced more strictly, they could have found another way.