​​If you ever worked with an AJAX call, you are probably familiar with the following error displayed in browser console:

Failed to load https://example.com/: No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘https://anfo.pl' is therefore not allowed access. If an opaque response serves your needs, set the request’s mode to ‘no-cors’ to fetch the resource with CORS disabled.

⏱ 5 minutes read

#CORS #browsers

​​There are millions of articles explaining how to fix the error above, but what exactly is this “Cross-Origin Resource Sharing” (CORS) thing, and why does it even exist?

⏱️ 4 minutes read

#CORS