Fuck CORS. Three hours into trying to make it fucking work... YES BROWSER I ALLOWED ALL ORIGINS WHY DONT YOU WORK 😭� - devRant

Ranter

Comments

2

lucaspar

3153

6y

Check if the server is really sending the Access-Control-Allow-Origin header with curl

curl -sSL -D - fonts.googleapis.com/css/... -o /dev/null

(obv. change the url to the one you're testing)
0

phez

41

6y

I was just going all rage mode and thought the problem is with my proxy that I use for the requests. But apparently are not even able to send requests to localhost?!
0

MrEliptik

513

6y

Maybe this can help you when testing things locally : https://chrome.google.com/webstore/...
4

Kimmax

11106

6y

CORS is awesome and can literally safe an ass or two in XSS situations (and similar)
0

hashedram

13000

6y

Trace backwards. From the actual header.

devRant © 2021 Hexical Labs LLC
Privacy Policy | Terms of Service