DEVELOPERS DON'T UNDERSTAND CORS

Summary from the TLDR Dev newsletter

Many web devs don't have a clear understanding of CORS, leading to security vulnerabilities, as shown by Zoom's use of a localhost web server that bypasses CORS protections.