Cross-Origin Resource Sharing (CORS)

wikipedia:Cross-Origin Resource Sharing is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served.

• Terraform resource: aws_s3_bucket_cors_configuration

Examples

[
    {
        "AllowedHeaders": [
            "*"
        ],
        "AllowedMethods": [
            "PUT",
            "POST"
        ],
        "AllowedOrigins": [
            "*"
        ],
        "ExposeHeaders": [],
        "MaxAgeSeconds": 3000
    }
]

[
   {
       "AllowedHeaders": [
           "*"
       ],
       "AllowedMethods": [
           "PUT",
           "POST",
           "GET",
           "DELETE"
       ],
       "AllowedOrigins": [
           "*"
       ],
       "ExposeHeaders": [
           "ETag"
       ],
       "MaxAgeSeconds": 3000
   }
]

Errors

• has been blocked by CORS policy

Related terms

• AWS API Gateway
• HSTS
• Tellme Networks
• Caddyfile
• gsutil cors
• Terraform resource: aws cloudfront origin access control
• CORS (golang)
• geth --http --http.corsdomain
• nginx.ingress.kubernetes.io/enable-cors
• QUARKUS Cross-Origin Resource Sharing (CORS): QUARKUS_HTTP_CORS_ORIGINS

See also

• HTTP request methods, PUT, GET, POST, HEAD, DELETE, CONNECT, OPTIONS, TRACE, PATCH
• CSRF, CORS, XSRF, OAuth 2.0 Security Best Current Practice
• CORS, HSTS, Access-Control-Allow-Origin, Enabling CORS for a REST API resource, Lighthouse bn --http --http-allow-origin, Caddyfile, gsutil cors, cors_rule, aws_s3_bucket_cors_configuration, geth --http.corsdomain, Preflighted requests, CORS (golang), aws_s3_bucket_cors_configuration
• HTTP security, CORS, OIDC