4 ms·
Sorry I am not an expert, but just wanted to raise that I recall that in our firm we had to disable CORS caching a while back, as this was non compliant with so
by s-xyz 4y ago
Sorry I am not an expert, but just wanted to raise that I recall that in our firm we had to disable CORS caching a while back, as this was non compliant with some security standards. I think it had to do with this: https://vulncat.fortify.com/en/detail?id=desc.dynamic.html.html5_cors_prolonged_caching_of_preflight_response https://vulncat.fortify.com/en/detail?id=desc.dynamic.html.h...
- woeh 4y agoThe article you mention targets prolonged caching, which it defines as more than 30 minutes. Disabling might not have been necessary?