Products · Pattern or everyday thing
CORS
Raised as a usability problem by 8 people on Hacker News over 9 years (2018–2026), in 7 threads.
No issue was raised by at least 3 people in 3 threads this year.
No issue was raised by at least 3 people in 3 threads in the last 5 years.
Every issue, all time, most people first
CORS rules are confusing and hard to get rightUnreviewed
20182026- Browser CORS decisions are counterintuitive and built on legacy precedent2026-06-22
- Framework CORS middleware is confusing and unhelpful, hiding what is actually configured2021-04-07
- Confusing which CORS setting covers which scenario and which side sends what2020-08-26
Unreviewed issues were grouped by machine: Claude Haiku labelled each comment as a usability complaint, named what it's about and summed up the problem in a line, and a small model grouped similar problems. Nobody has checked them by hand. Expect mistakes.
The newest 8 complaints
- Browser CORS decisions are counterintuitive and built on legacy precedent2026-06-22
- Web security mechanics are so complex that even experts get them wrong2026-06-21
- Fixing CORS problems takes about 30 minutes and requires re-reviewing gotchas each time2022-01-03
- Cookies silently fail to send cross-origin unless several non-obvious settings align, which is hard to debug2021-10-15
- Framework CORS middleware is confusing and unhelpful, hiding what is actually configured2021-04-07
- Confusing which CORS setting covers which scenario and which side sends what2020-08-26
- Hard to use correctly, so developers misuse it or set it overly permissive2019-07-11
- CORS rules are confusing and annoying to work with, even for experienced developers2018-06-04