Well, WebDAV clients don’t usually run untrusted scripts downloaded from random servers, so they don’t need CORS. In this sense (i.e. running dubious scripts f

Well, WebDAV clients don’t usually run untrusted scripts downloaded from random servers, so they don’t need CORS. In this sense (i.e. running dubious scripts from random untrusted sources) the closest thing to browsers would be npm, although its centralized nature (mostly) prevents malicious actors causing too much damage.