PhD scholar, BITS Pilani · ML for Earth observation
Working on machine learning for Earth observation. I write about what I learn: machine learning, satellite imagery, data quality, and the web tools I build along the way. Website: https://sankalpharitash.vercel.app GitHub: https://github.com/SankalpHaritash21 LinkedIn: https://www.linkedin.com/in/sankalp-haritash/
Markdown supported · ⌘↵ to post
José Pablo Ramírez Vargas
CORS is in no way a critical component of web security. If anything, CORS is a major pain for web developers. CORS does not prevent unauthorized access, does not prevent data breaches and instead it bugs the web developers over nothng. Only web browsers respect CORS because CORS' major fault is that is a client-side "security" measure. This means that you can (very easily) use a client that does not follow the rules. The perfect example is Postman. So where is the security? Nowhere to be found.