4 ms·
CORS does allow to share, not disallow! The default under SOP is not to share.
by JanSt 5y ago
CORS does allow to share, not disallow! The default under SOP is not to share.
- TheCoelacanth 5y agoYou're ignoring their point. There are still ways to share across origins even with SOP and without CORS, for example JSONP[1]. Using CORS is more secure than the pre-CORS way of sharing things across domains. [1] https://en.wikipedia.org/wiki/JSONP https://en.wikipedia.org/wiki/JSONP