3 ms·
I agree, the only thing I have ever found with CORS is that it makes it difficult for people who don't consider it when planning out servers should run. It goes
by jpangs88 8y ago
I agree, the only thing I have ever found with CORS is that it makes it difficult for people who don't consider it when planning out servers should run. It goes like this:
- Just use my API...
- I tried, please enable CORS.
- What's CORS?
I find it frustrating that this seems to be the default for most servers. I think it should be opt in and not opt out.
- dasil003 8y agoIn order to make it opt-in you’d need to disable cookies by default (at least for auth) or else you get massive pwnage by default.