Re:Show HN: I created a URL shortener that can be entirely h...
by detaro on Monday November 16, 2020 @08:58AM
(#25111654)
The Github API has CORS setup to allow requests from everywhere. This has nothing to do with being hosted on GitHub Pages.
[ Parent
| on HN ]
Re:Show HN: I created a URL shortener that can be entirely h...
by diggan on Monday November 16, 2020 @09:02AM
(#25111698)
> Github API has CORS setup
I know perfectly fine what you mean here, but in the name of security, it's important to be precise.
All websites and browsers have CORS, one way or another, as CORS is the general concept. By default, only "same-origin" requests are allowed and "cross-origin" requests are disabled. But CORS is still there none the less.
What GitHub has done in this case, is add support for "cross-origin" requests.
Nitpicky maybe, but thought it'd be useful to add to avoid any confusion.