> Browser is important > I want to emphasise how important browsers are in this whole security scheme. This is the important point which maybe many developers

> Browser is important > I want to emphasise how important browsers are in this whole security scheme. This is the important point which maybe many developers may not think about, that CORS is just a security "feature" within the browser. And, that if one made an HTTP(S) request directly to the server that they could simply spoof the origin. Obviously, there is reasoning to still have CORS for in order to protect users from malicious scripts on trusted websites or simply malicious websites.