DEV Community

Discussion on: Web security knowledge you must understand it (Part I: HTTPS, TLS, SSL, CORS, CSP)

Collapse
 
bassochette profile image
Julien Prugne

Cors is a browser enforced policy.
The server provide the the header during the preflight request made through an OPTION call.
The server does not send any error.

Collapse
 
ahmedatefae profile image
Ahmed Atef

thanks for this information, i will update it and if there other informations in this Topic provide it to us

Some comments have been hidden by the post's author - find out more