- Loading...
Sponsored by Dometrain Courses—Get 30% off Dometrain Pro with code ANDREW30 and access the best courses for .NET Developers

My new book ASP.NET Core in Action, Third Edition is available now! It supports .NET 7.0, and is available as an eBook or paperback.

Cross-Origin-Embedder-Policy: securing embedded resources
Understanding cross-origin security headers - Part 3
In this post I discuss the Cross-Origin-Embedder-Policy, the requirements it places on your resources, and why it's required for some JavaScript APIs…

Cross-Origin-Resource-Policy: preventing hotlinking and XSSI attacks
Understanding cross-origin security headers - Part 2
In this post I describe how to use the Cross-Origin-Resource-Policy to block cross-origin requests that would normally be allowed, such as in <img> tags…

Understanding cross-origin security headers
In this series I look at some of the security headers you can apply to your applications to enhance your security when interacting with cross-origin resources…

Making authenticated cross-origin requests with ASP.NET Core Identity
In this post I describe how to make authenticated cross-origin requests from the browser to an app using ASP.NET Core Identity.…

A deep dive into the ASP.NET Core CORS library
In this post I'm going to dive in to the code of the MVC Cors library, looking at some of the patterns the ASP.NET Core team have used in their infrastructure.…

