logoalt Hacker News

ceehexyesterday at 2:29 PM1 replyview on HN

cors stops the browser from reading the response but the request still gets processed by the server


Replies

dyzonetoday at 7:03 AM

Browsers use OPTIONS preflight request to do CORS validation. Servers shouldn't do too much work in an OPTIONS request. Should be a simple if statement, no db operations, which is usually where the bottleneck is.