title: What is the difference between CORS and CSPs?
body: <p>From my perspective, the technologies referred to as <strong>Cross-Origin Resource Sharing (CORS)</strong> and <strong>Content Security Policies (CSPs)</strong> seem to be very similar in purpose and implementation.</p>
  
  <p>Both seem to allow you to whitelist the origins of resources which an uncompromised version of your webpage incorporates, via HTTP response headers. The only difference I can see is that CSPs seem to be more fine-grained in what you can approve in your HTTP response.</p>