Relative Content

Tag Archive for http

How do web servers enforce the same-origin policy?

I’m diving deeper into developing RESTful APIs and have so far worked with a few different frameworks to achieve this. Of course I’ve run into the same-origin policy, and now I’m wondering how web servers (rather than web browsers) enforce it. From what I understand, some enforcing seems to happen in the browser’s end (e.g., honoring an Access-Control-Allow-Origin header received from a server). But what about the server?

How do web servers enforce the same-origin policy?

I’m diving deeper into developing RESTful APIs and have so far worked with a few different frameworks to achieve this. Of course I’ve run into the same-origin policy, and now I’m wondering how web servers (rather than web browsers) enforce it. From what I understand, some enforcing seems to happen in the browser’s end (e.g., honoring an Access-Control-Allow-Origin header received from a server). But what about the server?