New answers tagged webserver
I'd say the the focus of CORS is making the web safer for final users and most of it implementation is in fact incapsulated in modern browsers. What I mean is that it is not designed to only make your serverside content protected or unreachable, as you can always NOT send the referrer headers and bypass it. This is clearly not the case for "unconscious" ...
Top 50 recent answers are included