4 ms·
If a malicious website wanted to copy a blog's website to put ads on it, they already can just copy it outside of the browser on their end, which has the "benef
by sheept 8mo ago
If a malicious website wanted to copy a blog's website to put ads on it, they already can just copy it outside of the browser on their end, which has the "benefit" of preventing the original blog from taking the post down.
CORS also doesn't prevent a popular website with a personal vendetta[0] against a blogger from DDOSing the blog with their visitors, since CORS doesn't block requests from being sent.
For a purely static website, there shouldn't be any risk from enabling CORS.
[0]: https://news.ycombinator.com/item?id=46624740 https://news.ycombinator.com/item?id=46624740
- hvb2 7mo agoSure but copy and pasting stuff isn't a practical solution? The DDOS angle is unrelated? You can do that whenever you want. The risk is other people profiting/taking credit for your work. If all of this is true, why does anyone put a license on any software? It doesn't mean someone can't copy paste, but it gives them recourse. Enabling CORS is completely giving up any recourse you have IMHO