Hacker News new | past | comments | ask | show | jobs | submit login

The same-origin policy in browsers defaults to preventing JavaScript from making API calls out to any domain other than the one that hosts the page - unless those other domains have the right CORS headers.

https://developer.mozilla.org/en-US/docs/Web/Security/Same-o...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: