CORS Essentials

Rajesh Gunasundaram · Randall Goya

May 2017 · Packt Publishing Ltd

About this ebook

Share code and assets across domains in Web applications with CORSAbout This BookA step-by-step guide but at a high level/fast pace. Not all steps are covered as a basic knowledge is assumedProvides a basic overview of the concepts but the focus is on providing the practical skills required to develop applicationsFocuses on providing practical examplesWho This Book Is For

Web developers have been limited by the Same Origin Policy and often wish they could spread their application across different domains. You know JavaScript and AJAX, and have run up against the Same Domain Policy, which is limiting your applications.

What You Will LearnWhy you need CORS: Bending the Same Origin Policy and basic CORS implementation, headers and XMLHttpRequestCreating proxies for CORS: Sometimes the header is not enoughSecurity: vulnerabilities and how to secure your CORS applicationCORS implementations in Content Management systemsLearn about CORS in Windows applicationsTake CORS on the CloudApply CORS in Node.jsBest practices for CORSIn Detail

This book explains how to use CORS, including specific implementations for platforms such as Drupal, WordPress, IIS Server, ASP.NET, JBoss, Windows Azure, and Salesforce, as well as how to use CORS in the Cloud on Amazon AWS, YouTube, Mulesoft, and others. It examines limitations, security risks, and alternatives to CORS. It explores the W3C Specification and major developer documentation sources about CORS. It attempts to predict what kinds of extension to the CORS specification, or completely new techniques, will come in the future to address the limitations of CORS

Web developers will learn how to share code and assets across domains with CORS. They will learn a variety of techniques that are rather similar in their method and syntax. The book is organized by similar types of framework and application, so it can be used as a reference. Developers will learn about special cases, such as when a proxy is necessary. And they will learn about some alternative techniques that achieve similar goals, and when they may be preferable to using CORS

Style and approach

A step-by-step guide filled with real-world applications

About the author

Rajesh Gunasundaram is a software architect, technical writer, and blogger. He has over 15 years of experience in the IT industry, with more than 10 years using Microsoft.NET, 2 years of BizTalk Server, and a year of iOS application development. Rajesh is a founder and editor of technical blogs www.programmerguide.net and www.ioscorner.com, where you can fi nd many of his technical writings on.NET and iOS. Rajesh is also the founder and developer of a web product, www.VideoLens.net a platform that analyses YouTube videos and channels. Rajesh has also written a book ASP.NET Web API Security Essentials, for Packt Publishing. Rajesh holds a masters degree in Computer Application and began his career as a software engineer in 2002. He worked on client premises located in various countries, such as the UK, Belarus, and Norway. He also has experience in developing mobile applications for iPhone and iPad. His technical strengths include Azure, Xamarin, ASP.NET MVC, Web API, WCF,.NET Framework/.NET Core, C#, Objective-C, Angular, BizTalk, SQL Server, REST, SOA, design patterns, and software architecture.

Randall Goya has been a Senior Web Developer and Application Architect for enterprise organizations for several years, mostly specializing as a Drupal Consultant. Drupal as a framework is integrated with so many other applications and APIs, including payment gateways, media (Brightcove, YouTube, mp3, and video players), messaging (Amazon SQS, Mulesoft), as a content repository for other frameworks (WordPress), and for native mobile applications, and VOIP.