On Thu, Jan 6, 2022 at 3:42 PM Christopher Schultz < ch...@christopherschultz.net> wrote:
> Blake, > > On 1/6/22 16:17, Blake McBride wrote: > > I think, for now, I'll just use * when developing and turned off when in > > production. > > What's the point of that? The entire purpose of CORS is to protect users > from attackers while allowing legitimate uses of your own resources. > Running it in development-only protects nobody. > Did you read my entire sentence?
