Browser & Web Performance · Middle · Question 51 of 75

A server reflects the request's Origin into Access-Control-Allow-Origin for an allowlist of sites. Which header should it also send?

Explanation

Otherwise a CDN could cache the response with one origin's header and serve it to another origin, breaking CORS.

Further reading

Problem with a question

Browser & Web Performance · Middle · question 51

Test yourself

Take the Browser & Web Performance · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.

Take this quiz