Hacker News new | ask | show | jobs
by cors-fls 1590 days ago
It could be a great ressource to learn about CORS but when you look at the different examples they all suggest slightly different headers.

And in most example it's a blanket Allow-Origin: *

It would be better to have recommended headers + value (maybe multiple for different use cases) with an explanation and then apply theses recommendations for every server.