You explained in 13 mins what I spent hours reading and not comprehending. Thanks!

@Ashotofcode

3 жыл бұрын

Glad it helped Doran!

Thanks a lot, I was scratching my head a lot over this but you explained it briefly yet comprehensively

@Ashotofcode

4 жыл бұрын

Hi Mujthaba, glad it was helpful 😀

Awesome stuff! Thanks for being so clear and the example was very easy to follow:)

More simplified, thanks a lot for great explanation.

man, thanks a lot for sharing this knowledge. You made this topic very clear to me now!

whole day I was struggling with this :)) your explanation was clearrr, thanksss

@Ashotofcode

2 жыл бұрын

Glad it helped! :-)

Very clear explanation, thank you kind sir!

@Ashotofcode

Ай бұрын

Welcome :-) Cheers Mark

i merge to the crowd, great video. thanks. I like when you solve the problems in real time, without editing.

@Ashotofcode

3 жыл бұрын

No problem!

phenomenal explanation!

wonderfully explained.TYSM

@Ashotofcode

3 жыл бұрын

Glad it was helpful Shivaram! Cheers Mark :-)

Great explanation. Thanks!

@Ashotofcode

4 жыл бұрын

You're welcome!

Finally, i get it! Thanks.

@Ashotofcode

Жыл бұрын

Glad it helped! Cheers Mark 🙂

Thank you!!! I really appreciate the video!

@Ashotofcode

3 жыл бұрын

Glad it was helpful Aric :-)

Great video. Helped a lot. Thanks mate :)

@Ashotofcode

3 жыл бұрын

Glad it helped :-)

I liked that you failed couple of times and then debugged your own code. That actually showed some common mistakes that can be made and should be avoided!

@Ashotofcode

2 жыл бұрын

Cool thanks Tedis 😀

Thanks for making the video

very good explanation

best tutorial out there

@Ashotofcode

8 ай бұрын

Thanks!

Excellent ! Thanks !

WoW, Thank you so much!

Props to this guy for live coding.

@Ashotofcode

3 жыл бұрын

Thanks Micah :-)

it was very helpfull, thank you!

@Ashotofcode

3 жыл бұрын

Glad it was helpful! Cheers Mark

Thank You 👍🏻👍🏻

well explained! thanks

@Ashotofcode

3 жыл бұрын

Glad you liked it Timur :-)

Thank You very much. 🤘

@Ashotofcode

3 жыл бұрын

Thanks SM, glad it was useful 😀

shot & easy. Thanks

Awesome video

@Ashotofcode

8 ай бұрын

Thanks! Cheers Mark 🙂

Thanks great video :)

@Ashotofcode

3 жыл бұрын

Glad you liked it Louise. Cheers Mark :-)

Nice explanation ❤

@Ashotofcode

3 жыл бұрын

Glad you liked it Thisura :-)

thx very clear!!

@Ashotofcode

3 жыл бұрын

Thanks Erdem :-) glad it was useful.

It helped me understand what is CORS and I solved a real world problem. The problem was the origin doesn't support any headers and I was sending one. After I removed, it started working.

@Ashotofcode

3 жыл бұрын

Excellent, glad it helped Arijeet :-)

amazing

@Ashotofcode

3 жыл бұрын

Thank you! Cheers!

well done

@Ashotofcode

10 ай бұрын

Thanks :-)

Thanks bro

@Ashotofcode

4 жыл бұрын

Welcome 😎

Thanks..

@Ashotofcode

3 жыл бұрын

Welcome

So it's all about the back-end setting up CORS headers, and the browser will try to find these headers to determine whether there's CORS violation or not.

@Ashotofcode

3 жыл бұрын

Yep that's a good summary I'd say😀

One question - maybe anyone knows: Why can i not log out the json response one the first .then method?

hey quick question one of the options to fix the error was "If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled." could you explain this?

@Ashotofcode

3 жыл бұрын

Hi Anisha, good question, this would be if you simply wanted to check that the service existed, in that it returns a success code, but without any data. I'm not sure when this would be useful, but there are cases I guess. Cheers Mark

@dartme18

3 жыл бұрын

kzread.info/dash/bejne/oniJwcyndJW-oKg.html ; different Anisha I assume :-P

Great vid, thank you! QUESTION: When the API does not send back the response header [access-control-allow-origins]... I'm assuming it's still sending back the data in the response body... because the decision to show or not is being done by the receiving browser. This seems insecure and dangerous and something a hacker could get around, no?

@Ashotofcode

3 жыл бұрын

Thanks! Good question - Yes I think you are correct in that the data will be returned - the browsers are pretty solid though so I would think safe - this takes place internally in the browser so not something you can attack with Javascript really. Cheers Mark

@CryptoJitsu

3 жыл бұрын

@@Ashotofcode thanks!

Thanks for the video, that's cleared it up for me nicely :). If CORS is something only handled by the browser, I suppose that makes it a fairly weak piece of security. Could a browser / extension be made that simply ignores CORS or injects in the necessary header?

@Ashotofcode

3 жыл бұрын

Thanks James, I'm not really up on the capabitilites of extensions, but they have full control so would think they would be able cause problems here yes. Cheers Mark

@abhijithk1397

3 жыл бұрын

yes, you can find extensions in chrome store that disable CORS

Very clear and useful, yet there is still something my mind can't put hand on : in what are CORS useful ? Regarding how easy it is to go arount it... :/

@Ashotofcode

3 жыл бұрын

CORS is actually more about relaxing the existing security, so by default only requests from your own site can be made, which is the same-origin policy. With CORS we can allow other sites to access also. So one good scenario is when our API is on a different domain to our website - in this case CORS will allows us to let the website access our API - as otherwise will be blocked by the same origin policy. Another case is simply a public API and we want to allows anyone to call it, say a weather api, by default it is restricted to just the domain it runs under, so we add CORS to relax this security and allow anyone to call it. So CORS itself is not something to get around - that is the same origin policy - which is pretty locked down in browsers. Cheers Mark

Can cors be exploited if some token is in URL?? (GET METHOD) Arbitrary origin is reflected in response with ACAO & ACAC but the token is in URL

RIP, SWAPI

@Ashotofcode

3 жыл бұрын

D'oh yep it has died!

@dartme18

3 жыл бұрын

@@Ashotofcode Someone posted a duplicate pretty quickly after SWAPI died (that was six months ago I think?). Our company used SWAPI for interview exercises, so we were happy to see the replacement!

@Ashotofcode

3 жыл бұрын

@@dartme18 Ah yes, swapi.dev, cool thanks!

=> return

@Ashotofcode

3 жыл бұрын

Ah yes that one gets me a lot! thanks

audio is very low volume, I wish it wasn't that low

please explain with diagram

Arrow functions return by default if code is on the same line.

@Ashotofcode

3 жыл бұрын

Nice thanks Valetin!

Confusing for me...

+

I closed the video immediately after seeing Microsoft Edge being used....

@Ashotofcode

3 жыл бұрын

lol fair play :-)

The explanation was not deep enough, in this video you just explianed CORS is browser security policy stuff and seeing you tried it out for direct access on browser and via ajax call. It could be deeper to explain why browser needs this; what kind of attacks could be implemented if no this security policy on browser; What headers needs to be added to allow browser calls a cors resource, different browsers or same browser with different versions treat different headers to allow CORS; server side API header settings to control the access the resource in different scenarios etc.

very poorly explained, uses tools people may not be familiar with, the actual subject is almost ignored