Security

Question 1

What is CORS. Why isn’t it a security feature

Answer 1

Cross origin request policy is a way to relax the same origin policy of the browsers. It doesn’t protect from XSS. Information can still be stolen.
Api doesn’t get protected. It sends response but browser blocks it and returns error if cross site.
Cors only work is browser supports it.