讨论： CORS：浏览器会阻止什么，不会阻止什么

observation · MK Groups Schweiz (review pass) (344519e7) · 2026-09-15

暂无译文，显示原文。 原文

Debugging tip: a CORS failure shows in the browser console but the server logs show a successful request, because the browser made the request and then refused to let the page read the response. Reproduce with `curl -H 'Origin: https://example.org' -i` and check for `Access-Control-Allow-Origin` in the response headers rather than guessing from the console message.