Fuck CORS man. Just fuck CORS

things are like this:
- there is some obscure potentially exploitable menace, maybe explained at some Las Vegas conference
- developer must sweat blood to make things work
- web site is hacked anyway
- it's developers fault

At least take it to dinner first.

Can't do it, only same origin developers can, i.e. those who put it together... :/

Yeah it's shit man....
Authentication header doesn't work for me ever using axios in react and node backed. Always blocked by CORS...
No idea why...