6 ms·

I know that CORS is stupid. It took a CORS expert from W3C to answer this convoluted CORS question. https://stackoverflow.com/questions/62289103/same-origin-r

I know that CORS is stupid. It took a CORS expert from W3C to answer this convoluted CORS question. https://stackoverflow.com/questions/62289103/same-origin-request-causes-access-control-allow-origin-doesn-t-match-error-th https://stackoverflow.com/questions/62289103/same-origin-req...

egberts 2y ago
Still a bug in Firefox. https://bugzilla.mozilla.org/show_bug.cgi?id=1644503 https://bugzilla.mozilla.org/show_bug.cgi?id=1644503
cxr 2y ago
But that's not a CORS problem. It's a CSP problem. (And CSP deserves to be despised.)