API Design · Junior · Question 35 of 75

What does CORS control?

✓Correct answer: Whether a browser lets a web page from another origin read your API's responses
2Whether servers can call your API
3How fast your API responds

Explanation

CORS is enforced by browsers only. It's not an authentication mechanism; curl and servers ignore it.

Further reading

MDN: CORS ↗

Test yourself

Take the API Design · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.