html - 单击 anchor 标记上的链接是跨源请求吗？

Question

这是 CORS 的定义 Cross-origin resource sharing (CORS) is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served.

假设我有一个带有 linkedIn 链接的纯 HTML 网页。

<a href="https://linkedin.com">Visit my linkedIn</a>

单击 anchor 标记是否与“从另一个域请求域”相同/等效？如果不是，那么 anchor 标签如何免受 COR 限制？

Answer 1

我更喜欢 MDN's CORS的定义:

Cross-Origin Resource Sharing (CORS) is an HTTP-header based mechanism that allows a server to indicate any other origins (domain, protocol, or port) than its own from which a browser should permit loading of resources.

你的 anchor 标签会让你退出你的服务器并将你重定向到 LinkedIn 的，所以你不会向它请求任何东西。

再次来自 MDN:

An example of a cross-origin request: the front-end JavaScript code served from https://domain-a.com uses XMLHttpRequest to make a request for https://domain-b.com/data.json.

那么让我们尝试向 linkedin.com 发出 GET 请求。

fetch('https://linkedin.com')
    .then((response) => console.log(response));

正如预期的那样:跨源请求被阻止:同源策略不允许读取 https://linkedin.com/上的远程资源。