Method Resource Sharing in On-Premises Environment Based on Cross-Origin Resource Sharing and its Application for Safety-First Constructions

The method of resource sharing in an on-premises environment based on Cross-Origin Resource Sharing (CORS) is proposed for security reasons. However, using CORS entails several risks: Cross-Site Request Forgery (CSRF), difficulties in secure configuration, handling credentials, controlling complex requests, and restrictions associated with using wildcards. (1) To mitigate these risks, the following countermeasures are proposed: (2) Use CSRF tokens and the “SameSite” attribute. (3) Minimize preflight requests by allowing only specific origins. (4) Use the “withCredentials” flag or set the “Access-Control-Allow-Credentials” header on the server. (5) Handle custom headers by adding the required headers to CORS settings. (6) Specify a specific origin in the “Access-Control-Allow-Origin” header instead of using wildcards. Additionally, applying CORS for safety-first constructions, which helps raise awareness of dangerous actions in construction fields, is also being explored.

@article{Arai2024,
  title     = {Method Resource Sharing in On-Premises Environment Based on Cross-Origin Resource Sharing and its Application for Safety-First Constructions},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {15},
  number    = {5},
  year      = {2024},
  publisher = {The Science and Information Organization},
  author    = {Kohei Arai and Kodai Norikoshi and Mariko Oda},
  doi       = {10.14569/IJACSA.2024.0150567},
  url       = {https://doi.org/10.14569/IJACSA.2024.0150567}
}