You don’t use CORS to prevent client-side only apps, you use CORS to allow them....

		JimDabell on July 24, 2023 \| parent \| context \| favorite \| on: Advice for Operating a Public-Facing API You don’t use CORS to prevent client-side only apps, you use CORS to allow them. CORS reduces security restrictions, it doesn’t add them.