BASELINE NowYouCanUse.com
Widely Available Security
id: cors

CORS

Cross-Origin Resource Sharing is an HTTP-header based mechanism that allows a server to indicate any origins (domain, scheme, or port) other than its own from which a browser should permit loading resources. Also known as CORS.
Baseline Status: Achieved Widely Available on Jan 29, 2018 (Cross-browser Newly Available since Jul 29, 2015).
Desktop Browser Engine Support
Google Chrome
4
Supported
Mozilla Firefox
3.5
Supported
Apple Safari
4
Supported
Microsoft Edge
12
Supported
Mobile Browser Engine Support
Chrome Android
18
Firefox Android
4
Safari iOS
3.2
Specifications and References
Specification ↗ Can I Use (cors) ↗ Feature XML ↗
MDN Browser Compat Data Keys:
http.headers.Access-Control-Allow-Credentials ↗ http.headers.Access-Control-Allow-Headers ↗ http.headers.Access-Control-Allow-Headers.authorization_not_covered_by_wildcard ↗ http.headers.Access-Control-Allow-Headers.wildcard ↗ http.headers.Access-Control-Allow-Methods ↗ http.headers.Access-Control-Allow-Methods.wildcard ↗ http.headers.Access-Control-Allow-Origin ↗ http.headers.Access-Control-Expose-Headers ↗ http.headers.Access-Control-Expose-Headers.wildcard ↗ http.headers.Access-Control-Max-Age ↗ http.headers.Access-Control-Request-Headers ↗ http.headers.Access-Control-Request-Method ↗