DDoSing who? Doesn't CORS help here?
cors stops the browser from reading the response but the request still gets processed by the server
Browsers use OPTIONS preflight request to do CORS validation. Servers shouldn't do too much work in an OPTIONS request. Should be a simple if statement, no db operations, which is usually where the bottleneck is.
cors stops the browser from reading the response but the request still gets processed by the server
Browsers use OPTIONS preflight request to do CORS validation. Servers shouldn't do too much work in an OPTIONS request. Should be a simple if statement, no db operations, which is usually where the bottleneck is.