title: How is a cross site ajax request different from a normal form post?
body: <p>I've been working on an ajax-powered website and of course encountered the problem with cross site requests using ajax (I'm performing a log-in thus I need to POST to my API's endpoint). I've read up on CORS and how to respond to requests in order to allow this.</p>
  
  <p>My question is: how is this ajax request any less safe and a normal (say, from a form) POST request?</p>
  
  <p>Doesn't this ajax request use the same routing, HTTP methods, etc that a normal request would use? Wouldn't it's inputs need to be validated just like any request?</p>
  
  <p>If I remember correctly, if I create a normal form and set the action to another site it will work. Isn't this the same that the ajax POST is doing?</p>
  
  <p>Thanks</p>