CORS vs CSP
· One min read
- CORS allows a site A (data provider) to give permission to site B to read (potentially private) data from site A (using the visitor's browser and credentials).
- CSP allows a site to prevent itself (data consumer) from loading (potentially malicious) content from unexpected sources (e.g. as a defence against XSS).
![[object Object]](https://tp-misc.b-cdn.net/tianpan-avatar.jpg){kind=avatar}