Hacker News Reader

How you can be a web developer today and not knowing how to add two headers to all responses a API does, boggles my mind. Literally took me about 30 minutes to understand how CORS works when it first started being shipped with browsers.

View on HN

You probably understand the rest of what you need to understand CORS. I've noticed that web developers today don't even understand things like HTTP in general particularly well. They're not trying to understand, they're trying to ship the next feature, and CORS is "blocking them".

Sadly true, I love to ask webdevs in intervews if they can give definitions of http, or idk, user agent, and it's impressive how much ignorance there is out there.

In my experience with CORS, my problem is it takes 30 minutes nearly every time you need to bugfix it.

It’s not that complicated but when something breaks CORS adjacent, you’re stuck reviewing the gotchas.

Reply on news.ycombinator.com