Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You don't need to set up CORS to load assets on a page from a CDN's origin. Cross-origin taint only matters when trying to read asset data from a script.

I think we may be talking past each other and one of us is misunderstanding OP.



Yes, but you need it if your API isn't on the same origin as your static assets.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: