Web Security · Middle · Question 26 of 75

What does the `Sec-Fetch-Site` request header tell the server?

1Which TLS version the browser uses
2The user's location
✓Correct answer: Whether the request came from the same origin, the same site, another site, or a direct user action

Explanation

Fetch Metadata headers let a server apply a resource isolation policy, for example rejecting cross-site requests to API endpoints.

Further reading

web.dev: Protect your resources from web attacks with Fetch Metadata ↗

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.