search

apigovau / national-api-design-standards

Australian National API Design Standards
35 stars 15 forks source link

API Security - Authentication and Authorisation incorrect wording #10

Closed wejrox closed 3 years ago

wejrox commented 4 years ago

Dot point 9 reads:

CORS headers should only be used when necessary as it reduce overall security mechanisms built into web browsers by selectively relaxing cross-origin restrictions.

But it should read 

CORS headers should only be used when necessary as it reduces the overall security mechanisms built into web browsers by selectively relaxing cross-origin restrictions.