JavaScript's same-origin policy provides protection against many nasty attacks on the web. But it also prevents doing some creating things on the web, things that should be easy and natural. Fortunately, the W3C's CORS standard relaxes the protections somewhat in relatively secure ways. And now ASP.NET Web API supports CORS.
↧