3 ms·
> No CORS (first standardized in 2014), no cross-site protection (first standardized in 2012). This is not correct. CORS doesn’t protect anything, it removes s
by JimDabell 1y ago
> No CORS (first standardized in 2014), no cross-site protection (first standardized in 2012).
This is not correct. CORS doesn’t protect anything, it removes security barriers. The same-origin policy that stops cross-site requests goes back to the 90s, it’s been in there about as long as JavaScript.