Mastodawn

As #Invidious and piped.video are not to be used by third parties (for good and understandable reasons) and for those who can't or don't want to self-host, is there still a #privacy-preserving non-#CORS #YouTube proxy REST API out there somewhere?

#FollowerPower #privacyMatters #MyPrivacyisNoneOfYourBusiness #SurveillanceCapitalism #dataCapitalism #platformCapitalism #digitalFeudalism #GDPR #predatoryCapitalism #privacyPreserving #privacyFriendly #privacyRespecting #digitalSelfDefense

Habr 3d ago

CORS для собеседований и работы

Если вы видите эту ошибку — вы не одиноки: Access to fetch at ' https://api.site.com ' from origin ' http://localhost:3000 ' has been blocked by CORS policy. Разберем, почему это происходит и как это починить. Что такое CORS и для чего он нужен. Кратко, понятно.

https://habr.com/ru/articles/935636/

#CORS #безопасность #cors_ошибки #собеседования

DevelopersIO Aug 1

Amazon Cognitoを使った認証付きファイルアップロード機能の実装をやってみた
https://dev.classmethod.jp/articles/aws-cognito-user-id-pool-s3-upload-app/

#dev_classmethod #Amazon_Cognito #Amazon_S3 #CORS #AWS

Amazon Cognitoを使った認証付きファイルアップロード機能の実装をやってみた | DevelopersIO

robrich Jul 31

https://dev.to/marsou001/what-are-preflight-requests-and-why-they-matter-3h5i - when you do #CORS, the pre-flight request is crucial. Thanks for the deep dive https://www.linkedin.com/in/marouane-souda.

What Are Preflight Requests and Why They Matter

If you've been reading about Cross-Origin Resource Sharing, or CORS in short, there is a good chance...

DEV Community

Qiita - 人気の記事 Jul 8

【Google Cloud】ローカル開発環境からIAP保護されたAPIへ接続する方法
https://qiita.com/kkkanao7/items/c771d199e3707d42c27e?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #CORS #認証 #IAP #Next_js #GoogleCloud

【Google Cloud】ローカル開発環境からIAP保護されたAPIへ接続する方法 - Qiita

⚠️ 重要この記事は実際の開発体験に基づいて、Claude Codeによって執筆されています。設定方法やエラー対応は環境によって異なる場合があります。 🎯 この記事で解決できること ✅ ローカル開発環境からIAP保護されたAPIへの接続 ✅ CORSエラーの解決...

Qiita

Tom Smykowski Jun 17

🛡️ Think setting Access-Control-Allow-Origin is enough to protect your frontend?
Spoiler: It’s not.
Learn why CORS is just the start — not the full wall.
👉 https://tomaszs2.medium.com/think-csp-and-cors-are-enough-think-again-87447ab31754
#WebSecurity #CORS #FrontendDev

Think CSP and CORS Are Enough? Think Again - Tom Smykowski - Medium

Since frontend is a surface access, it’s also a surface of possible hacking attempts. In this article, you’ll learn about most important frontend security methods. API server checks if the request…

Medium

jub0bs Jun 14

🎉 I've just released v0.7.0 of jub0bs/cors, my #CORS middleware library for #golang!

💀 Now that Private-Network Access (PNA) has been put on indefinite hold in favour of a new permission-based mechanism named "Local-Network Access", I've removed all support for PNA.

https://github.com/jub0bs/cors

GitHub - jub0bs/cors: perhaps the best CORS middleware library for Go

perhaps the best CORS middleware library for Go. Contribute to jub0bs/cors development by creating an account on GitHub.

GitHub

Denis Evsyukov 🃏Jun 13

Very interesting, it turns out that my server #gotosocial had problems with #cors.

Since the server is hosted on the social.evsyukov.org domain, and the name is used as evsyukov.org, redirection of requests from one domain to another is configured.

But as it turned out, all requests to evsyukov.org ended with an error, due to the fact that the cors rules were not configured and the default rules were used. That is, requests were allowed only from this server.

Only after I added the allowing rule:

Access-Control-Allow-Origin: *

requests began to go through without problems. Yes, I allowed all requests. Simply because on evsyukov.org I do not have services with private api.

DevelopersIO Jun 13

Twilio Functions で CORS を正しく設定する方法：筆者が体験した失敗例と成功例
https://dev.classmethod.jp/articles/twilio-functions-cors-example/

#dev_classmethod #Twilio #CORS

Twilio Functions で CORS を正しく設定する方法：筆者が体験した失敗例と成功例 | DevelopersIO

Twilio Functions を使って Web クライアントと API 通信を行う際に避けて通れないのが CORS（クロスオリジン通信）の問題です。本記事では、筆者が実際に遭遇した「うまくいかなかった例」と「うまくいった例」をもとに、Twilio Functions における CORS 対応の正しい実装方法を解説します。エラーの原因がわからず悩んでいる方、Twilio をフロントエンドと組み合わせて使いたい方におすすめの内容です。

Twilio Functions で CORS を正しく設定する方法：筆者が体験した失敗例と成功例 | DevelopersIO

Show thread

Marco Lehner Jun 5

@iFSR @dm2lct @BitsUndBaeumeDresden
Auch selfhosting ist für die Firma ein zu hohes Risiko, Geheimnisse preis zu geben.
Weiß nicht, ob das aktuell ist, aber im Katalog ist sogar "hosting in Deutschland" ein zu buchbares Feature. Die Frage ist, wo sonst, in den #USA ?
Hinzubuchbar sind noch die Bestätigung, dass man selbstständig wählt, iFrame Zulassung (wsl. #CORS rule ?) und die Gewichtung.
Das heißt die Angleichung der Wahlergebnisse nach diversen Formeln noch vor der offiziellen Ausgabe, wenn ich das richtig verstehe.