Blog

Brave Shields: CORS, fingerprinting protections, and how aggressive blocking can break API integrations

Brave may block third-party scripts or cookies—your CORS policy cannot fix a request that never leaves the browser.

1 min read
braveprivacycors

Tor windows

Private windows with Tor change egress paths—rate limits and CORS-unrelated IP blocks may trigger.

Do not rely on IP allowlists for CORS-sensitive flows when users enable Tor.

Rewards

Brave Ads and Rewards inject additional network activity—separate telemetry from your API CORS dashboards.

Sponsored images may prefetch content—cache keys should include privacy mode flags.

Back to blog