3 ms·
> Original security article: briefly touches on CORS > Follow up article: that thing about CORS is not right > Hacker news top level comments: that article's
by Timpy 7y ago
> Original security article: briefly touches on CORS
> Follow up article: that thing about CORS is not right
> Hacker news top level comments: that article's not quite right
> First child comments: tlc is also not exactly right
I feel like I understand CORS even less now. Article title is right, I don't understand CORS.
- calibas 7y agoI think the issue with understanding CORS is that you first need to understand same-origin policy and exactly when it applies. CORS is simply a method for bypassing same-origin policy. You also need to understand how a CSRF attack works. Once you grasp both of these things, then you have the base for how and why CORS exists. Until then it's mostly an annoyance.