What does cross-origin resource sharing (CORS) allow users to do?

What does cross-origin resource sharing (CORS) allow users to do?

• A. Override same-origin policy for specific resources
• B. Enforce strict same-origin policy
• C. Encrypt cross-origin requests
• D. Block cross-origin requests entirely

Answer: (A)

CORS lets a server relax the same-origin policy for specific resources, enabling cross-origin requests from origins the server has approved. The browser will only permit those requests if the server signals allowed origins (via headers like Access-Control-Allow-Origin and related controls). This mechanism often involves a preflight check for non-simple requests, ensuring the server consents to the cross-origin access. It does not encrypt data (that’s TLS) and it doesn’t block all cross-origin requests by itself; it provides a controlled, opt-in exception to the default policy for particular resources.

CORS lets a server relax the same-origin policy for specific resources, enabling cross-origin requests from origins the server has approved. The browser will only permit those requests if the server signals allowed origins (via headers like Access-Control-Allow-Origin and related controls). This mechanism often involves a preflight check for non-simple requests, ensuring the server consents to the cross-origin access. It does not encrypt data (that’s TLS) and it doesn’t block all cross-origin requests by itself; it provides a controlled, opt-in exception to the default policy for particular resources.