What is CORS? | Cross-Origin Resource Sharing | CORS Explained!

#web_security #cors #sop #csrf
Understanding Cross-Origin Resource Sharing is essential if you’re a web developer or want to understand the browser security model. Cross-origin Resource Sharing is a way to relax the SOP, Same Origin Policy, the security mechanism whereby browsers prevent Cross-Site Request Forgery, or CSRF.

In this video, what is CORS, and Why we need it?. You’ll understand how we can bypass the Same Origin Policy with CORS and how HTTP headers are used to customize CORS implementation.

--------- Video Outline ---------

00:09 Browser functionalities and security model
01:07 CSRF attack -- Cross-Site Request Forgery
01:41 Same Origin Policy
02:13 What is an Origin
03:05 CSRF and SOP
04:03 Relaxing SOP
04:41 Introducing CORS
05:17 CORS implementation -- HTTP Headers
06:45 Preflight Request
07:19 CORS in Web Browsers vs CLI client

Resources to know more:

Check out more of The TechCave Videos:

Stay Tuned!

[tarmeez]

CORS is one of my biggest challenges when I teach programming to the beginners and why is this happening and what we can do to bypass it, great video, thank you so much 👌🏻

[andrewfielden]

What a great explanation. You've just demystified why my API call was a) sending two HTTP requests and b) why my JWT header item was being removed in the second one. Thank you!!

[ppena]

I've been dealing with this issue for 2 days now and didn't really understand it until now. Thank you!

[Carlesgl]

i´ve been more than an hour trying to understand this concept with other videos, blogs. This video was my solution! Thanks!

[DaveO]

understanding CORS in 5 min is possible!
well done thank you

[bastienfontaine]

Thank you for this video ! I finally understood what's behind the concept of CORS 🔥

[khumbokaunda]

Thank you very much for this wonderful explanation

[GB-mihe]

What a GREAT video on this topic. Bravo!

[luanecarolineaquinocavalca]

thank you so much, great explanation 👏🏽👏🏽👏🏽

[ivan-the-l]

Very nicely explained. Clear and on point 🔥

[lastidea]

Excellent explanation, thank you Sir ♥

[benmichel]

Great walkthrough! Thanks for making this. 🙏

[anasssoulimani]

Great work! Awesome content as always❤

[jaelee]

Nice video on CORS, it's clear that you put a lot of effort into creating a high quality presentation.

[tiynwgo]

So the browser is the one enforces CORS, and the resource server is the one that can be setup to relax the restriction.

[RandallReedJr]

This is a really helpful explanation, thanks!

[ACLAproductions]

This was an amazing explanation! Thank you :)

[andersonrafaelcunha]

Great video, very easy to understand with those examples.

[jenks]

What if I don't what to access or change any data just want to click a button on website A which then clicks or simulate a click on website B and execute a function, does this falls under CORS ?
If not any suggestion on how this can be done?

[sapnashah]

can you explain important of CORS for client server