<?xml version="1.0" encoding="UTF-8"?>
<feature id="cors"><name>CORS</name><description>Cross-Origin Resource Sharing is an HTTP-header based mechanism that allows a server to indicate any origins (domain, scheme, or port) other than its own from which a browser should permit loading resources. Also known as CORS.</description><group>security</group><group_name>Security</group_name><baseline><status>widely</status><low_date>2015-07-29</low_date><high_date>2018-01-29</high_date></baseline><support><browser name="chrome" version="4" supported="true"></browser><browser name="firefox" version="3.5" supported="true"></browser><browser name="safari" version="4" supported="true"></browser><browser name="edge" version="12" supported="true"></browser><browser name="chrome_android" version="18" supported="true"></browser><browser name="firefox_android" version="4" supported="true"></browser><browser name="safari_ios" version="3.2" supported="true"></browser></support><specifications><spec>https://fetch.spec.whatwg.org/#http-cors-protocol</spec></specifications><caniuse><id>cors</id></caniuse><mdn_url>https://developer.mozilla.org/docs/Web/HTTP/Reference/Headers/Access-Control-Max-Age</mdn_url><compat_features><key>http.headers.Access-Control-Allow-Credentials</key><key>http.headers.Access-Control-Allow-Headers</key><key>http.headers.Access-Control-Allow-Headers.authorization_not_covered_by_wildcard</key><key>http.headers.Access-Control-Allow-Headers.wildcard</key><key>http.headers.Access-Control-Allow-Methods</key><key>http.headers.Access-Control-Allow-Methods.wildcard</key><key>http.headers.Access-Control-Allow-Origin</key><key>http.headers.Access-Control-Expose-Headers</key><key>http.headers.Access-Control-Expose-Headers.wildcard</key><key>http.headers.Access-Control-Max-Age</key><key>http.headers.Access-Control-Request-Headers</key><key>http.headers.Access-Control-Request-Method</key></compat_features><canonical_url>https://nowyoucanuse.com/features--cors.html</canonical_url></feature>