Why I No longer Hate CORS and Why you should too!

As we all know, CORS is a plague on the web which did make many of us go insane over The "has been blocked by CORS policy" error on different browsers whenever you're trying to request or post data to your API that is running on a different PORT or server. In this video, We'll understand CORS like we are 5 and I'm gonna make you love CORS again :)
⭐ Timestamps ⭐
00:00 Intro
00:44 Explaining CORS like you're 5
06:17 Ugly CORS
08:20 Getting over CORS. It's simple
11:21 CORS Headers you must know
🧭 Turn Design into React Code | From prototype to Full website in no time
• Turn Design into React...
🧭 Watch Tutorial on Designing the website on Figma
• I Design a onecolor We...
🧭 Watch Create a Modern React Login/Register Form with smooth Animations
• Create a Modern React ...
🧭 Debug React Apps Like a Pro | Master Debugging from Zero to Hero with Chrome DevTools
• Debug React Apps Like ...
🧭 Master React Like Pro w/ Redux, Typescript, and GraphQL | Beginner to Advanced in React
• Master React Like Pro ...
🧭 Learn Redux For Beginners | React Redux from Zero To Hero to build a real-world app
• Debug React Apps Like ...
🧭 Build Login/Register API Server w/ Authentication | JWT Express AUTH using Passport.JS and Sequelize
• Build Login/Register A...
🧭 Introduction to GraphQL with Apollo and React
• Introduction to GraphQ...
🐦 Follow me on Twitter: / ipenywis
💻 Github Profile: github.com/ipe...
Made with 💗 by Coderone

[@michaelhashimoto1650]

Thank you! I get it now! I used to just get frustrated.. now I kind of know what to do and look for. Now I gotta figure out how to configure it for Spring Boot. Thanks!

[@tulehong3613]

Sorry, I still hate CORS.

[@timkilian7140]

CORS is complete bullshit. You can't do the request from the browser, but you can use a proxy that calls the request, and call the proxy in the browser. Completely useless. But I understand, that the application can not steel a different session, it could be implemented different tho, imo... Blocking the request completly is dump. Just remove the session.

[@slot642]

I am trying to fetch data from an api using react but the api isn't my own so i do not have access to add the cors middleware to it how do I go about that

[@universecode1101]

CORS is always something strange for a dev 😝 this content is very helpful 👏🏻

[@sathiyasp947]

Awesome video. luckily I find it. It solved my problem.Thanks.

[@lahirukariyawasam7865]

Great video. Very helpful.

[@tammielisa]

Gee that’s nice. Now what do I do about “require is not defined?”

[@goffyfoot82]

figure it out

[@luisbarbosa5597]

crack!! finally dudeee thanks for putting it this way

[@juanausensi499]

I still haven't an answer: What is the point of cors? What is trying to achieve?

[@joshuagermon2169]

To avoid malicious websites sending requests with your authentication cookies from your browser and having access to the response

[@josephuzuegbu7431]

this is one of the best explanation on CORS

[@amirrahman853]

when i started learning there was no thing called cors and when it came i already knew why it is implemented :P

[@user-bi7fh5qo7p]

thank you

[@chesterxp508]

GoodJob!

[@ranchpanda3530]

I have this as my unsolved problem -_-

[@BotanicalWonders60]

lol me too

[@VinnyXL420]

Every single chime...

[@Randomguy48279xyz]

👍

[@mrkhoros]

Why you should too! or you shouldn't?

[@matiasmiraballes9240]

I was about to ask the same, he only told us how to fix the problems, no the benefits of using it.

[@ticua07]

It's there to prevent malicious websites to able to send requests (that may have auth cookies or sensible data in the cookies) to other websites, pretty much setting a whitelist of domains/IPs that your API can be accessed to prevent being it used on other websites (with potentially bad purposes)

[@jayvee-official]

you don't need to install CORS... while you can add a simple HTTP header: Access-Control-Allow-Origin :v

[@DhavalAhir10]

This is for Backend. You don't have Backend access. This header is send by Backend code in response not in with HTTP request.

[@jayvee-official]

@@DhavalAhir10 yep.. I use NodeJs/Express for backend and res.header() to setup vanilla CORS via related headers.. it’s worked without CORS

[@vasiovasio]

For everyone who wants to improve the Security Headers on your site securityheaders.com/