What's actually going on with CORS, under the hood
Dipta
CORS is one of those things every web developer runs into sooner or later. Most of us know how to fix it — add a header, change a config, ask the backend person to "do something about CORS." But how many of us actually understand what the browser is doing in the background, and why it's doing it? Let's go through it today, slowly, with a simple example. What's an "origin"? Before we get into CORS, there's one word we need to pin down: origin . An origin is three things put together — the scheme,