Dispatches / a short note
Why both CSRF and CORS ?
Why both?
Why do we have both CSRF protection and CORS? https://smagin.fyi/posts/cross-site-requests/
tl;dr
CORS - read protection
CSRF - write protection
discussion: https://news.ycombinator.com/item?id=43231411