RPC//CORS
- Cross-Origin Resource Sharing: browser security that controls which web origins can call the RPC.
Cross-Origin Resource Sharing: browser security that controls which web origins can call the RPC.
rpc-http-cors-origins=["*"] allows ANY website to call your node — convenient for development only.
Dangerous in production if the port is internet-accessible — any malicious page could interact with your node.
Restrict to specific origins (["http://localhost:3000"]) for any non-development deployment.