Deep dive in CORS: History, how it works, and best practices

[CommunityNews]

Learn the history and evolution of same-origin policy and CORS, understand CORS and the different types of cross-origin access in depth, and learn (some) best practices.

April 12, 2021 · 20 min · Ilija

Table of Contents

• The error in your browser’s console
• In the beginning was the first subresource
  • Origins & cross-origin
  • The many dangers of cross-origin requests
• Same-origin policy
• Enter CORS
  • Cross-origin writes
  • Preflight requests
  • Cross-origin reads
• Fine-tuning CORS
• Some best practices
  • Free for all
  • Keeping it in the family
  • NULL origins
  • Skip cookies, if you can
• Additional reading

Deep dive in CORS: History, how it works, and best practices

This thread was posted by one of our members via one of our news source trackers.

[bot]

Corresponding tweet for this thread:

Devtalk (dev_talk)

Share link for this tweet.