_:n837d3bf5e01e4dd78ddbbfb333f7403bxb9
<http://schema.org/text>
"Thanks, that's a fair point. That said, it still seems wise to specify the origin within the CORS configuration so unknowing users (using regular browsers) can't be tricked into uploading to my S3 bucket. I guess that's the point of the origin being configurable by S3?"
<https://wip.chat/questions/what-s-the-correct-cors-configuration-for-allowing-direct-uploads-in-s3>