Skip to content
#

Cross-origin resource sharing (CORS)

Star

Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources on a web page to be accessed from another domain outside the domain from which the first resource was served. CORS also relies on a mechanism by which browsers make a "preflight" request to the server hosting the cross-origin resource, in order to check that the server will permit the actual request. In that preflight, the browser sends headers that indicate the HTTP method and headers that will be used in the actual request. For security reasons, browsers restrict cross-origin HTTP requests initiated from scripts. For example, fetch() and XMLHttpRequest follow the same-origin policy. This means that a web application using those APIs can only request resources from the same origin the application was loaded from unless the response from other origins includes the right CORS headers.

Resource types

  • Invocations of fetch() or XMLHttpRequest
  • Web Fonts (for cross-domain font usage in @font-face within CSS), so that servers can deploy TrueType fonts that can only be loaded cross-origin and used by websites that are permitted to do so
  • WebGL textures
  • Images/video frames drawn to a canvas using drawImage()
  • CSS shapes from images
  • scripts
  • iframes

Here are 109 public repositories matching this topic...

Language: Java
Filter by language
All 5,280 JavaScript 3,611 TypeScript 676 Python 152 HTML 137 Go 124 Java 109 PHP 86 C# 81 Shell 47 CSS 41
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

ionutbalosin / java-application-security-practices

Star 29

Application security best practices and code implementations for Java developers. This project is intended for didactic purposes only, supporting my training course.

cors csp password-flow sca security-testing sast dast api-security jwks authorization-code-flow client-credentials-flow security-logging security-design-principles oauth-grant-types authorization-code-flow-with-pkce token-introspection json-web-key-set java-process-security roles-based-access-control
  • Updated Nov 28, 2024
  • Java

CleilsonAndrade / game-list-api

Star 4

Game List API é uma API com a proposta de que se possa gerenciar listas de jogos previamente cadastrados. Utilizando os recursos do framework Spring para web do Java em conjunto com outras ferramentas como: Spring Web, Spring Data JPA e banco de dados como MySQL e H2 Database, nos quais são utilizados para ambientes de desenvolvimentos específicos.

mysql java api cors games sql spring backend jpa hibernate h2-database domain-model list-game
  • Updated Aug 19, 2024
  • Java

Created by WHATWG, Matt Oshry, Brad Porter, Michael Bodell, Tellme Networks

Released May 2006

Followers
13 followers
Website
fetch.spec.whatwg.org/#http-cors-protocol
Wikipedia
Wikipedia

Related Topics

ajax content-security-policy jsonp xhr