CORS TL;DR Don’t do Access-Control-Allow-Origin: *❗❗ CORS What is it? Cross-Origin Resource Sharing (CORS) is a way for resources to be shared between domains. A domain is considered to be different when the domain, port, or protocol are not the same as the requesting domain. For example, a …