Will CORS policy prevent resource access from non-browser requests?

However, does this prevent Http requests from a CURL, or other native applications/web-servers (ie. a request written and run via PHP) from successfully retrieving data from that resource? No, CORS config won’t prevent non-browser stuff from successfully retrieving your resources. The same-origin policy is enforced only by browsers. It’s not enforced by servers. (And CORS … Read more