3 ms·
No, the cookies won't be sent. That would defeat the whole purpose.
by jefftk 6y ago
No, the cookies won't be sent. That would defeat the whole purpose.
- CobrastanJorji 6y agoSo this effectively eliminates the "XMLHttpRequest.withCredentials" setting? Interesting! Thanks for clarifying.
- jefftk 6y agoNo, is still has an effect. CORS operates on a per-origin basis, while privacy mitigations operate on a per-site basis. You might want withCredentials if www.site.example wanted to share cookies with forums.site.example.