3 ms·Yes, but if ads do it, that would at worst make the ad server vulnerable, not your server.by xg15 4mo agoYes, but if ads do it, that would at worst make the ad server vulnerable, not your server.Beltiras 4mo agoYou apparently understand less than me. The little I do understand is that CORS is protection for a site's user, not the site.TeMPOraL 4mo agoIt's a protection of site's business model.