Looking to facilitate cross domain AJAX requests and need some clarification.
- Can CORS be implemented in IE versions below 8?
- Is setting
Access-Control-Allow-Origin
to*
the only way to allow requests from any site, and are there security concerns associated with this? - In terms of client security, by default CORS requests do not send cookies (such as session data) to the server. However, is it possible to override this behavior and send cookie data?