Cross-origin resource sharing (CORS)

Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources on a web page to be accessed from another domain outside the domain from which the first resource was served. CORS also relies on a mechanism by which browsers make a “preflight” request to the server hosting the cross-origin resource, in order to check that the server will permit the actual request. In that preflight, the browser sends headers that indicate the HTTP method and headers that will be used in the actual request. For security reasons, browsers restrict cross-origin HTTP requests initiated from scripts. For example, fetch() and XMLHttpRequest follow the same-origin policy. This means that a web application using those APIs can only request resources from the same origin the application was loaded from unless the response from other origins includes the right CORS headers.

Resource types

Invocations of fetch() or XMLHttpRequest
Web Fonts (for cross-domain font usage in @font-face within CSS), so that servers can deploy TrueType fonts that can only be loaded cross-origin and used by websites that are permitted to do so
WebGL textures
Images/video frames drawn to a canvas using drawImage()
CSS shapes from images
scripts
iframes

GitHub: https://github.com/topics/cors
Wikipedia: https://en.wikipedia.org/wiki/Cross-origin_resource_sharing
Created by: WHATWG, Matt Oshry, Brad Porter, Michael Bodell, Tellme Networks
Released: May 2006
Related Topics: xhr, ajax, jsonp, content-security-policy,
Last updated: 2026-06-23 00:06:34 UTC
JSON Representation

https://github.com/nyirurugoomar/world_vision-store-management-system-backend

A Store Management API facilitates seamless interaction between technicians and storekeepers. It includes endpoints for inventory management, user authentication, request handling, stock updates,

cors crud express guard helmet mongodb nestjs nestjs-backend nodejs pipe security

Last synced: 10 Apr 2026

https://github.com/pblnahu1/AuthenticationWithReactMySQL

axios cors expressjs javascript mysql nodejs react

Last synced: 25 May 2026

https://github.com/jefferson-gbarbosa/api-pass-in

O pass.in é um aplicativo de gestão de participantes em eventos presenciais que foi desenvolvido no NLW Unite da Rocketseat

cors dayjs fastify nodejs prisma sqlite typescript zod

Last synced: 04 Apr 2026

https://github.com/habib-676/gardening-community-app

This is a full-stack web application designed for gardening enthusiasts. The platform allows users to share gardening tips, explore local gardener profiles, ask plant care questions, and participate in gardening events. It promotes knowledge sharing on composting, hydroponics, balcony gardening, and more.

cors daisyui dotenv expressjs firebase html5 javascript mongodb nodejs react tailwindcss vite

Last synced: 10 Apr 2026

https://github.com/amanmandal-m/mock_7_backend

This is Food Delivery App Backend system so here user can register and after login they can view the available restraunts and book order by their prefrences each restraunts have menu items .

bcrypt cors express-js jsonwebtoken mongoose node-js

Last synced: 08 Apr 2026

https://github.com/willdarkins/sticky-quips-backend

Backend & database production for note taking application that resembles a sticky note format attaching links and short reminders

body-parser cors dotenv express mongodb mongoose nodejs

Last synced: 10 Apr 2026

https://github.com/flexberry/newplatform.flexberry.aspnet.webapi.cors

cors

Last synced: 06 Jun 2026

https://github.com/databytesun/task-tracker

A Task Tracker application where we have a backend API with Node.js and Express, which interacts with a MongoDB database, and connect everything with a React front end.

cors dotenv express-js mern mern-project mern-stack mongodb mongodb-database nodejs nodemon postman react reactjs