3 ms·
> CORS is basically happening because of the sensitive data that browser sends by default, so if browser is not sending such info, then CORS also need not be ap
by robertlagrant 2y ago
> CORS is basically happening because of the sensitive data that browser sends by default, so if browser is not sending such info, then CORS also need not be applied
Can you cite where this behaviour is defined?
- deleted 2y ago[deleted]
- rk06 2y agoI am just asking if there is a way around it. I know CORS is in palce due to browser sending cookie and auth info by default with HTTP requests. other poster mentioned that fetch does have this behavior, but I have not seen if such requests will be blocked by CORS or not
- robertlagrant 2y agoAh okay. It didn't appear to be a question at all. In that case, I'd say yes that might well make sense. CORS is a bit of a cudgel.