Will It CORS?
Dev tools
web development explainer
SHOW HN2020
How HN took it
4 positive, 0 neutral or asking, 1 mixed, 3 critical, out of 8 comments about the project. Thread score +0.09.
Docs: 3 for, 2 againstDesign: 0 for, 1 againstIdea: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Clear, intuitive walkthrough of CORS headers
From 3 comments
Beautiful, definitely one of the clearest walkthroughs I've seen on CORS, with enough detail to understand what's going on with all those magic headers.
taldo on HNInformative and intuitive.
abhay07 on HNAn invaluable resource IMHO: https://w3c.github.io/webappsec-cors-for-developers/
bugmen0t on HN
Useful for tutoring and teaching
From 1 comment
Awesome work! It will be in my tutoring program!
minhoryang on HN
Objections
CORS is confusing and hard to configure
From 3 comments
I've tried to deal with CORS, but I find it very confusing which different setting covers which scenario and which side needs to send what. Maybe I'm missing something obvious,…
InfiniteRand on HNSorry, but I still don't understand what CORS is or how it works.
justaj on HNMy main issue with CORS is the latency doubling introduced by preflight requests. I wish there was a more secure escape hatch for that than including things like access tokens in…
anderspitman on HN
Does not protect against malicious actors as expected
From 1 comment
One thing that confuses me about CORS is who it is trying to protect. I'd never really looked into it recently, as I'd never done anything that needed a cross origin request. But…
tzs on HN
Requests
Make it work in Firefox Focus/Klar without disabling tracker blocking
From 1 comment
Thanks for creating this! Very useful. Do you know what's preventing it from working in Firefox Focus/Klar? "Get Started" button does nothing unless tracker blocking (4 detected)…
sm4rk0 on HN
Easy way to disable CORS in the browser during development
From 1 comment
What drives me nuts with CORS is there's no (easy) way to disable it in the browser for development purpose, e.g. when I want to run some scripts in a local HTML file to do some…
chinhodado on HN
Questions
What is CORS protecting against and why does it exist
From 2 comments
I hope, some day to actually understand CORS. What it does. Why it exists. What good does it do. It seems extremely weird to me that my web page cannot get a simple json file…
perryizgr8 on HNOne thing that confuses me about CORS is who it is trying to protect. I'd never really looked into it recently, as I'd never done anything that needed a cross origin request. But…
tzs on HN
Alternatives named
Chrome --disable-web-security flag
From 1 comment
I think the --disable-web-security flag should work for you if you're using Chrome or Chromium: https://stackoverflow.com/questions/3102819/disable-same-origin-policy-in-chrome
chrisshroba on HN
Safari Develop menu CORS disable option
From 1 comment
Safari has an option to disable CORS in the "Develop" menu.
ratww on HN
cors-anywhere proxy
From 1 comment
just use this https://cors-anywhere.herokuapp.com/ or just set all your cors headers to * on your server
zackify on HN
W3C webappsec CORS for developers guide
From 1 comment
An invaluable resource IMHO: https://w3c.github.io/webappsec-cors-for-developers/
bugmen0t on HN