You're viewing the readable version of this site. The interactive extras (search, diagrams, read-aloud) need JavaScript and a current browser. Enable JavaScript; if it is already enabled, update your browser.

Tag

Notes tagged “cors”

Every note filed under cors, newest first.

A filtered view of the notes.

2026

  1. The Header That Grants Nothing

    CORS does not protect your server. It relaxes a rule about who may read a reply — and almost every misconfiguration comes from believing it does the opposite.

    security web cors http browsers caching dissecting-systems