Hacker News new | ask | show | jobs
by jimmychangas 2537 days ago
The default cross-origin blocking behavior is useful for many things, such prevention of data exfiltration via XSS vulnerabilties. CORS is a way to relax this behavior.