Implementing Oracle API Platform Cloud Service

Cross origin resource sharing (CORS)

CORS is a mechanism that can be used by web applications to request resources from another domain outside of the domain from which it was first served. For example, a web page may request images, stylesheets, or videos from a URL in another domain. Certain cross domain requests could be exploited to attack a site, and are therefore not allowed by default. However, CORS defines a way for a browser and server to interact to determine if the cross-origin request is safe and therefore allowed. For HTTP request methods that can modify data, such as POST, the specification mandates that browsers check with the server first to determine whether the request is allowed; browsers initiate what is referred to as ...