Illustrates CORS preflight and impact of Access-Control-Max-Age header.
-
Updated
Aug 17, 2024 - C#
Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources on a web page to be accessed from another domain outside the domain from which the first resource was served. CORS also relies on a mechanism by which browsers make a "preflight" request to the server hosting the cross-origin resource, in order to check that the server will permit the actual request. In that preflight, the browser sends headers that indicate the HTTP method and headers that will be used in the actual request. For security reasons, browsers restrict cross-origin HTTP requests initiated from scripts. For example, fetch()
and XMLHttpRequest
follow the same-origin policy. This means that a web application using those APIs can only request resources from the same origin the application was loaded from unless the response from other origins includes the right CORS headers.
fetch()
or XMLHttpRequest
@font-face
within CSS), so that servers can deploy TrueType fonts that can only be loaded cross-origin and used by websites that are permitted to do sodrawImage()
Illustrates CORS preflight and impact of Access-Control-Max-Age header.
Project for a personal web page. It consists of SPA and the backend.
An ASP.NET Core backend application (server) for the DevExpress BI Dashboard. The app targets .NET 6.0.
.Net 8 、SqlSugar ORM、Vue 2.X、RBAC、前后端分离的开箱则用的企业级中后台权限管理系统
A CMS Administration interface for managing security headers for Optimizely CMS Traditional and Hybrid builds.
💖 ASP.NET Core 8.0 全家桶教程,前后端分离后端接口,vue教程姊妹篇,官方文档:
An application automating the creation of programming assignments to ease teachers' workload and enable students to practice across various programming courses.
This is a service project that saves drawing coordinate data received from the client into a JSON file.
Leave Management System - SOLID and Clean Architecture .NET 7
It is an ASP.NET Core Web API Project that I created to understand the Clean Architecture. CQRS, EF Core, Authentication, Authorization, Cors, JWT, Mail Service, Pagination, Fluent Validation, Automapper, Docker, Docker-Compose technologies were all used in the project.
A simple ASP.NET Core API
This is a C# Todo API using ASP.NET Core Web API. It supports user registration, login, and todo task management. The project includes Azure Bicep for infrastructure setup, and uses GitHub Actions for continuous integration and continuous deployment.
Learning Web API
.NET - Cross-Origin Resource Sharing
The template to setup a backend server using Entity Framework and XML Documentation, bypassing CORS policies, restructuring API response format, and customizing message for standard HTTP status codes
A sample API backend made with ASP.NET Core 5.0
Minimal API .Net6
Created by WHATWG, Matt Oshry, Brad Porter, Michael Bodell, Tellme Networks
Released May 2006