index.html

---
layout: default
title: enable cross-origin resource sharing
---

	<div class="container">
		<div class="hero-unit">
			<h1><span class="muted">enable</span> cross-origin resource sharing</h1>
			<p>Cross-Origin Resource Sharing (CORS) is a <a href="http://www.w3.org/TR/cors/">specification</a> that enables truly open access across domain-boundaries. If you serve public content, please consider using CORS to open it up for universal JavaScript/browser access.</p>
			<p class="help-block pull-right">[<a href="http://en.wikipedia.org/wiki/Cross-Origin_Resource_Sharing">more...</a>]</p>
		</div>
	</div>

	<div class="container">

		<section>
			<h2>Why is CORS important?</h2>
			<p>JavaScript and the web programming has grown by leaps and bounds over the years, but the <a href="http://en.wikipedia.org/wiki/Same_origin_policy">same-origin policy</a> still remains. This prevents JavaScript from making requests across domain boundaries, and has spawned various hacks for making cross-domain requests.</p>
			<p>CORS introduces a standard mechanism that can be used by all browsers for implementing cross-domain requests. The spec defines a set of headers that allow the browser and server to communicate about which requests are (and are not) allowed. CORS continues the spirit of the open web by bringing API access to all.</p>
		</section>

		<div class="row-fluid" style="text-align: center;">
		<div class="span4">
			<a href="server.html">
			<img src="img/cloud-download.svg" alt="CORS on the server" width="128" height="128" />
			<h3>CORS on the server</h3></a>
		</div>

		<div class="span4">
			<a href="client.html">
			<img src="img/browser-2.svg" alt="CORS on the client" width="128" height="128" />
			<h3>CORS on the client</h3></a>
		</div>

		<div class="span4">
			<a href="resources.html">
			<img src="img/book-lines.svg" alt="More resources" width="128" height="128" />
			<h3>More resources</h3></a>
		</div>
		</div>


	<br><br>

	</div>