
Mar6,2014ArticleASP.NETWebAPITip:OfCORSYouCanMakeCross-DomainRequests!JavaScript'ssame-originpolicyprovidesprotectionagainstmanynastyattacksontheweb.Butitalsopreventsdoingsomecreatingthingsontheweb,thingsthatshouldbeeasyandnatural.Fortunately,theW3C'sCORSstandardrelaxestheprotectionssomewhatinrelativelysecureways.AndnowASP.NETWebAPIsupportsCORS....M...