jeena/en.javascript.info
1
0
Fork 0
Code Issues Pull requests Projects Packages Wiki Activity Actions

Details on cross-origin requests & credentials

Browse source 
Cross-origin requests initiated by embedded images and forms actually bring cookies by default. Though it is incorrect to say that all cross-origin requests do not bring credentials by default.
This commit is contained in:
Temirzhan Yussupov 2020-05-25 13:09:14 +06:00 • committed by GitHub
parent 0da5b2b68c
commit 46daea1596
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
5-network/05-fetch-crossorigin/article.md
View file

@ -309,7 +309,7 @@ JavaScript only gets the response to the main request or an error if there's no
## Credentials ## Credentials
A cross-origin request by default does not bring any credentials (cookies or HTTP authentication). A cross-origin request initiated by JavaScript code by default does not bring any credentials (cookies or HTTP authentication).
That's uncommon for HTTP-requests. Usually, a request to `http://site.com` is accompanied by all cookies from that domain. But cross-origin requests made by JavaScript methods are an exception. That's uncommon for HTTP-requests. Usually, a request to `http://site.com` is accompanied by all cookies from that domain. But cross-origin requests made by JavaScript methods are an exception.