_:n837d3bf5e01e4dd78ddbbfb333f7403bxb5
<http://schema.org/text>
"CORS security is implemented in browsers. And not something on the origin. If you setup your S3 bucket to allow public uploads, even if that's from WIP.chat using CORS, anybody can upload anything to your S3 bucket outside of a browser, by issuing direct POST/PUT calls."
<https://wip.chat/questions/what-s-the-correct-cors-configuration-for-allowing-direct-uploads-in-s3>