Re:CORS is not meant to secure an API endpoint
by JimDabell on Monday February 14, 2022 @10:16PM
(#30342294)
> a world without CORS would be a world where those rights are always granted.
We’ve already seen a world without CORS, and that didn’t happen. Cross-origin restrictions were brought in almost immediately after the introduction of JavaScript and existed for over a decade before CORS was introduced.
We’ve already seen a world without CORS, and that didn’t happen. Cross-origin restrictions were brought in almost immediately after the introduction of JavaScript and existed for over a decade before CORS was introduced.