Browser & Web Performance · Junior · Question 58 of 75
Which header in a response allows any origin to read it?
- ✓Correct answer:
Access-Control-Allow-Origin: * - 2
Allow: * - 3
Origin: *
Explanation
* is fine for public data. It can't be combined with credentialed requests; then the exact origin must be echoed.
Test yourself
Take the Browser & Web Performance · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.