3 ms·

Ok but like why would you pass cookies along

• easton 2y ago
  Because in the 90s/early 2000s someone thought it was a good idea to send cookies for the given site along with all requests (probably a good move, since it would stink to have to tell the browser somehow to explicitly send a cookie for every request, even ones initiated outside of JS). You could say that sites instead must prescribe a "send-cookies-when-requests-are-from-this-site" header, but that's kind of the same thing as CORS.
  • joquarky 2y ago
    We used to rewrite the session ID into all link href and form action URLs for browsers that didn't enable/support cookies. If any link or form did not contain the SID, the app broke. It was tedious.
• dceddia 2y ago
  Just to add to the sibling comment - you don’t get a choice to pass cookies or not, the browser just includes them automatically.