MediaWiki:Apihelp-main-param-crossorigin

Enwhay accessingway ethay API usingway a osscray-omainday AJAX equestray (CORS) andway usingway a essionsay oviderpray atthay isway afesay againstway osscray-itesay equestray orgeryfay (CSRF) attacksway (uchsay asway OAuthway), useway isthay insteadway ofway origin=* otay akemay ethay equestray authenticatedway (i.e., otnay oggedlay outway). Isthay ustmay ebay includedway inway anyway epray-ightflay equestray, andway ereforethay ustmay ebay artpay ofway ethay equestray URI (otnay ethay POST odybay).

Otenay atthay ostmay essionsay oviderspray, includingway andardstay ookiecay-asedbay essionssay, oday otnay upportsay authenticatedway CORS andway annotcay ebay usedway ithway isthay arameterpay.