Do You Really Know CORS?
I recently implemented a feature that depends on CORS and I don't see anything in this article that adds any value over Mozilla's thorough CORS docs.[1]If you're writing an article on CORS today I also think you should mention recent CORS developments such as Cross-Origin Read Blocking (CORB)[2] and features on the horizon such as Cross-Origin-Resource-Policy, Cross-Origin-Window-Policy, etc. that in light of Spectre, Meltdown etc. are meant to help plug speculative execution holes.[3][1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS[2]: https://www.chromium.org/Home/chromium-security/corb-for-dev...[3]: https://www.arturjanc.com/cross-origin-infoleaks.pdf