Rules Hub
Coding Rules Library
← Back to all rules
Rule priority, scope & exceptions
Use this to align rules with the senior-level structure (P0/P1/P2, scope, exceptions/tradeoffs).
fullstack ruleP1universalStack: javascript
fetchcorscookiessecurity
Send cookies via credentials: 'include' instead of a manual Cookie header
Use the fetch credentials option for cross-origin authenticated requests rather than manually copying the Cookie header.
PR: hegnar-web · org-mining-hist-2026-06Created: Jun 19, 2026
Bad example
Old codejavascript
| 1 | fetch(url, { headers: { Cookie: document.cookie } }); |
Explanation (EN)
Objašnjenje (HR)
Good example
New codejavascript
| 1 | fetch(url, { credentials: 'include' }); |
Explanation (EN)
Objašnjenje (HR)