Notes on Cross-Origin Resource Sharing (CORS) and how browsers enforce cross-origin security policies.