Tag
cors
- Sep 10, 2026 CORS Preflight, Credentials, and the Response Sharing Rules The request classifications that decide whether a preflight happens, what the OPTIONS exchange negotiates, and why credentialed CORS forbids the wildcard origin. web platform
- Oct 22, 2025 How a Browser Computes an Origin, and Why Ports and Schemes Count The tuple comparison behind the same-origin policy, the opaque origins that never match anything, and the document.domain exceptions that weaken the rule. security
- Dec 17, 2024 Subresource Integrity and the Trust Chain for Third-Party Scripts How the integrity attribute verifies fetched bytes, why cross-origin scripts need CORS for the check to run, and what hash pinning does and does not protect against. web platform