> CORS only exists because XMLHTTPRequest broke the assumptions of web 1.0 servers. Suddenly any web browser loading any page anywhere could make a request to your server without the user's explicit permission
This had always been true; making cross-origin requests with e.g. <img> tags is still very much a thing.
This had always been true; making cross-origin requests with e.g. <img> tags is still very much a thing.