Re:Why do we have both CSRF protection and CORS?
by Retr0id on Monday March 03, 2025 @07:37AM
(#43241166)
Nothing prevents this, but the client must still emit preflight checks (an extra round-trip) for every endpoint, and again if headers need to change.
[ Parent
| on HN ]
There are no comments on this comment yet.