im in a love or hate relationship with the CORS policy, its intentions are good, but it’s easily bypassed so it ends up just confusing new developers and annoying everyone else.
how is it easily bypassed
proxies, and literally anything backend
course but sometimes you don’t have a backend