Unverified80% confidenceFactTime unknown
GitHub的Raw文件服务默认设置了宽松的CORS策略，允许任何域名下的前端页面直接请求GitHub仓库中的文件
1
Sources
80%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedGitHub's Raw file service sets Access-Control-Allow-Origin: * in response headers, allowing front-end code on any domain to directly retrieve repository file contents.86% similarUnverifiedGitHub的Raw文件服务在HTTP响应头中设置了Access-Control-Allow-Origin: *，允许任何域名的前端代码跨域访问80% similarPartially VerifiedGitHub的raw.githubusercontent.com域名在响应头中设置了适当的CORS策略，允许任何来源的网页通过fetch API获取其上托管的文件内容80% similarVerifiedGitHub Pages is a completely free static website hosting service provided by Microsoft's GitHub platform.78% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/33472API
curl https://kongchang.com/api/v1/knowledge/claims/33472MCP
get_claim(id=33472)