Web Stuff
CORS - Cross Origin Resource Sharing. A mechanism to allow browsers to request data from 3rd party URLs.
e.g. If I request from my go.yqydan.com site that hits apis on go.yqydan.com/create-short-url, then that's not a 3rd party. Otherwise, you can allow whitelist of 3rd party.
Browsers implement same-origin policy. Website can request images from its url but not external unless meeting conditions. When making request, there is a header.
Some http requests that have non-standard headers need to be pre-flighted (put, patch, delete). The browser will first make a http OPTIONS request, the server will respond with info on which methods are allowed for that origin, and then the request can go through.
Browsers treat urls with different ports as completely separate domains.
Last updated