Comment by dyzone

1 day ago

DDoSing who? Doesn't CORS help here?

cors stops the browser from reading the response but the request still gets processed by the server

  • Browsers use OPTIONS preflight request to do CORS validation. Servers shouldn't do too much work in an OPTIONS request. Should be a simple if statement, no db operations, which is usually where the bottleneck is.