Gregory's ServerAn interesting thing about CORS is how poorly understood it is and how difficult it is to find a really clear explanation
I’m not sure I could write a clear explanation myself
The best I’ve seen is https://jakearchibald.com/2021/cors/
 7 comments
@simon I really like https://javascript.info/fetch-crossorigin 's explanation. It's long, but comprehensive (IMO). @simon And while I'm at it, *cough* https://toastdriven.com/blog/2024/aug/19/django-fetch-and-cors/ *cough* …Not that I'm any judge if it's any good or not. @simon what I kept working with CORS is that it is a security measure that is very easy to circumvent. See my short post about it https://her.esy.fun/posts/0025-a-quick-cors-proxy-in-a-few-lines-of-clojure/index.html @simon indeed is cryptic. The best reference I found was this one: https://jub0bs.com/posts/2023-02-08-fearless-cors/#cors-101 But the one you shared looks nice!  @simon I tried my best in this section of an old post: https://jub0bs.com/posts/2023-02-08-fearless-cors/#cors-101 |
@simon CORS and OAuth are the two topics I just can’t keep in my head. Every new project I struggle to set these up correctly, bang my head against it for multiple hours and finally go read up from first principles. Once it’s working I forget all about it until the next project