# What are the risks of enabling Cross-origin resource sharing (DISCOURSE\_ENABLE\_CORS)

**URL:** <https://meta.discourse.org/t/what-are-the-risks-of-enabling-cross-origin-resource-sharing-discourse-enable-cors/41248>\
**Category:** Support\
**Created:** [March 18, 2016, 3:15am UTC](https://meta.discourse.org/t/what-are-the-risks-of-enabling-cross-origin-resource-sharing-discourse-enable-cors/41248 "2016-03-18T03:15:56Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [March 18, 2016, 3:25am UTC](https://meta.discourse.org/t/what-are-the-risks-of-enabling-cross-origin-resource-sharing-discourse-enable-cors/41248/4 "2016-03-18T03:25:28Z")

</div>

Allowing sites you do not control CORS access is a bad idea.

---

_[View the full topic](https://meta.discourse.org/t/what-are-the-risks-of-enabling-cross-origin-resource-sharing-discourse-enable-cors/41248)._