3 ms·CORS tries to prevent CSRF issues by preventing cross-origin cookie authentication.by zemnmez 5y agoCORS tries to prevent CSRF issues by preventing cross-origin cookie authentication.jefftk 5y agoSure, but moving your whole app under a single origin to avoid dealing with CORS doesn't weaken any protection here.zemnmez 5y agoif handled correctly, sure. but it also means that implicit cookie authentication ('ambient authority') is possible and can easily happen by accident