CORS
CORS
( = cross-origin resource sharing,
“allikatevaheline ressursside ühiskasutus”)
olemus
mehhanism, mis võimaldab veebilehel puuduvaid ressursse (näiteks pilte, fonte, skripte, videosid) võtta
teisest domeenist
=
a mechanism that allows restricted resources on a web page to be requested from another domain
ülevaateid
https://en.wikipedia.org/wiki/Cross-origin_resource_sharing
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS
https://www.html5rocks.com/en/tutorials/cors/
https://www.w3.org/TR/cors/ (subsection 3.2)
turvalisus
https://mobilejazz.com/blog/which-security-risks-do-cors-imply/
https://medium.com/@ehayushpathak/security-risks-of-cors-e3f4a25c04d7
https://www.pivotpointsecurity.com/blog/cross-origin-resource-sharing-security/