Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying CORS Essentials
  • Table Of Contents Toc
CORS Essentials

CORS Essentials

By : Gunasundaram
3 (1)
close
close
CORS Essentials

CORS Essentials

3 (1)
By: Gunasundaram

Overview of this book

This book explains how to use CORS, including specific implementations for platforms such as Drupal, WordPress, IIS Server, ASP.NET, JBoss, Windows Azure, and Salesforce, as well as how to use CORS in the Cloud on Amazon AWS, YouTube, Mulesoft, and others. It examines limitations, security risks, and alternatives to CORS. It explores the W3C Specification and major developer documentation sources about CORS. It attempts to predict what kinds of extension to the CORS specification, or completely new techniques, will come in the future to address the limitations of CORS Web developers will learn how to share code and assets across domains with CORS. They will learn a variety of techniques that are rather similar in their method and syntax. The book is organized by similar types of framework and application, so it can be used as a reference. Developers will learn about special cases, such as when a proxy is necessary. And they will learn about some alternative techniques that achieve similar goals, and when they may be preferable to using CORS
Table of Contents (10 chapters)
close
close
9
Index

Chapter 3. Usability and Security

In this chapter, you will learn how to implement CORS in various scenarios to enable access across domain boundaries.

We will discuss the following:

  • CORS and XDomainRequest (IE 8 and 9) browser support
  • Detecting AJAX support in the browser
  • Using preflight to ensure usability and improve security
  • The Access-Control-Allow-Origin header, with and without the wildcard
  • HTTP request and response headers for usability and security
  • CORS requests with credentials, and setting and reading cookies
  • The CORS security cheat sheet by OWASP

Note

We use the term client to denote any user agent capable of making a CORS request. Typically, the client is the browser displaying the page making the request.

Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
CORS Essentials
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon