6 ms·
Because you want to get hacked? Seriously. Without cors, js on any site you visit can make requests as you to anywhere. The only thing protecting you would
by crowselect 2y ago
Because you want to get hacked?
Seriously. Without cors, js on any site you visit can make requests as you to anywhere. The only thing protecting you would be security through obscurity.
- webstrand 2y agoI also want this, but only to run my own apps which I build for my private use. If you don't assume the user is incompetent, you could build a secure browser that provides permission prompts to opt out of cors.
- immibis 2y agoIt should be safer if it doesn't send cookies, but you can still get in trouble for "hacking" because you visited a website that contained code that sent "hacking" requests to another website.
- holowoodman 2y agoNot really. There is still same-origin-policy and CSRF tokens.