---
title: "Discussion on \"Understanding CORS: What Is It and Why It Matters.\" | Hashnode"
description: "Discussion on \"Understanding CORS: What Is It and Why It Matters.\". Mastering Cross-Origin Resource Sharing: A Guide to Implementing and Understanding CORS?"
url: "https://hashnode.com/posts/understanding-cors-what-is-it-and-why-it-matters/6616e8d945e1a19649bdb384"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Understanding CORS: What Is It and Why It Matters.](https://sankalp-haritash.hashnode.dev/understanding-cors-what-is-it-and-why-it-matters?utm_source=hashnode&utm_medium=feed)

Mastering Cross-Origin Resource Sharing: A Guide to Implementing and Understanding CORS?

Apr 10, 2024 · 3 min read · sankalp-haritash.hashnode.dev  
Updated Jun 13, 2024  
Read the article

-   [#system-design](https://hashnode.com/tag/system-design)
-   [#javascript](https://hashnode.com/tag/javascript)
-   [#python](https://hashnode.com/tag/python)
-   [#web-development](https://hashnode.com/tag/web-development)
-   [#cors](https://hashnode.com/tag/cors)
-   [#security](https://hashnode.com/tag/security)
-   [#software-development](https://hashnode.com/tag/software-development)

## Written by

[SANKALP HARITASH](https://hashnode.com/@SankalpHaritash)

@SankalpHaritash · India

  
[View profile](https://hashnode.com/@SankalpHaritash)

PhD scholar, BITS Pilani · ML for Earth observation

Working on machine learning for Earth observation. I write about what I learn: machine learning, satellite imagery, data quality, and the web tools I build along the way. Website: https://sankalpharitash.vercel.app GitHub: https://github.com/SankalpHaritash21 LinkedIn: https://www.linkedin.com/in/sankalp-haritash/

## Responses 1

Markdown supported · ⌘↵ to post

[José Pablo Ramírez Vargas](https://hashnode.com/@webJose)

[Apr 13, 2024](https://hashnode.com/posts/understanding-cors-what-is-it-and-why-it-matters/6616e8d945e1a19649bdb384/comment/661a2a9356d33a3c8ac136a9)

CORS is in no way a critical component of web security. If anything, CORS is a major pain for web developers. CORS does not prevent unauthorized access, does not prevent data breaches and instead it bugs the web developers over nothng. Only web browsers respect CORS because CORS' major fault is that is a client-side "security" measure. This means that you can (very easily) use a client that does not follow the rules. The perfect example is Postman. So where is the security? Nowhere to be found.

[José Pablo Ramírez Vargas](https://hashnode.com/@webJose)

[Apr 13, 2024](https://hashnode.com/posts/understanding-cors-what-is-it-and-why-it-matters/6616e8d945e1a19649bdb384/comment/661a2a9356d33a3c8ac136a9#reply-661a9d85610b24f87b841859)

[SANKALP HARITASH](https://hashnode.com/@SankalpHaritash) Yes, and just by the existence of this possibility (tools that don't give a darn about CORS) is what makes CORS a pretty much useless feature. In the end CORS exists to annoy legitimate users of your API. That's it. Security where? Nowhere. Even web browsers have a way to turn off CORS. You don't even need Postman or anything else. Just run Chrome with security turned off.

So my point being: CORS doesn't work because it cannot deliver, and I believe your article is just following the trend of praising CORS when in fact there is nothing to praise. I get it, it is what all authors do. Still: It would be refreshing to read the **real** truth about CORS instead of the usual lies.

[SANKALP HARITASH](https://hashnode.com/@SankalpHaritash)

[Apr 13, 2024](https://hashnode.com/posts/understanding-cors-what-is-it-and-why-it-matters/6616e8d945e1a19649bdb384/comment/661a2a9356d33a3c8ac136a9#reply-661aa9a57822683e2c3e49f3)

[José Pablo Ramírez Vargas](https://hashnode.com/@webJose) My article is about what I've learned; it's not about following trends. I'm sharing what I've discovered and what I'm learning as a student. While I may have missed some points, it doesn't mean I'm sharing false information. I'm not an author; I'm a student writing for my own benefit. If anyone wants to learn along with me, they're welcome to join.

There's a quote that resonates with me: "Being a developer takes time; it's not a piece of cake that can be eaten in a minute.

[SANKALP HARITASH](https://hashnode.com/@SankalpHaritash)

[Apr 13, 2024](https://hashnode.com/posts/understanding-cors-what-is-it-and-why-it-matters/6616e8d945e1a19649bdb384/comment/661a2a9356d33a3c8ac136a9#reply-661aaaf24beba8775e52e58d)

I am using this platform as a documentation of my learning. Sir if you find these article useless no need to read it. and if you can help me in improving then you are welcome.