RPC//CORS

- Cross-Origin Resource Sharing: browser security that controls which web origins can call the RPC.


Cross-Origin Resource Sharing: browser security that controls which web origins can call the RPC.

rpc-http-cors-origins=["*"] allows ANY website to call your node — convenient for development only.

Dangerous in production if the port is internet-accessible — any malicious page could interact with your node.

Restrict to specific origins (["http://localhost:3000"]) for any non-development deployment.