6 ms·
No, it's exactly the other way around. The SOP protects you from these security issues. CORS is a feature that can be used to loosen up the SOP, to allow more c
by StrauXX 3mo ago
No, it's exactly the other way around. The SOP protects you from these security issues. CORS is a feature that can be used to loosen up the SOP, to allow more complex inter-application behaviour.
- himata4113 3mo agoah right, my own brain got jumbled from reading all the comments forgetting that cors: '*' is not the default.
- flux3125 3mo agoAnd now he's part of the confusing comment section lol
- himata4113 3mo agoI fixed it, it stays relatively the same vs original explanation, just had inverted defaults I have no idea why I thought '*' was the default. Definitely impacted by the confusing comment section haha.