Commit 46daea1

authored

Details on cross-origin requests & credentials

Cross-origin requests initiated by embedded images and forms actually bring cookies by default. Though it is incorrect to say that all cross-origin requests do not bring credentials by default.

1 parent 0da5b2b commit 46daea1Copy full SHA for 46daea1

File tree

1 file changed

-1

lines changed

5-network/05-fetch-crossorigin
- article.md

1 file changed

-1

lines changed

`‎5-network/05-fetch-crossorigin/article.md‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -309,7 +309,7 @@ JavaScript only gets the response to the main request or an error if there's no`
`309`	`309`
`310`	`310`	`## Credentials`
`311`	`311`
`312`		`-A cross-origin request by default does not bring any credentials (cookies or HTTP authentication).`
	`312`	`+A cross-origin request initiated by JavaScript code by default does not bring any credentials (cookies or HTTP authentication).`
`313`	`313`
`314`	`314`	That's uncommon for HTTP-requests. Usually, a request to `http://site.com` is accompanied by all cookies from that domain. But cross-origin requests made by JavaScript methods are an exception.
`315`	`315`

0 commit comments

Comments

(0)

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit 46daea1

File tree

1 file changed

1 file changed

`‎5-network/05-fetch-crossorigin/article.md‎`

0 commit comments