Which mechanism allows a web application to request resources from a different origin than its own?

Explanation

Cross-Origin Resource Sharing (CORS) is the standard browser security mechanism that allows servers to specify which origins are permitted to access their resources. JSONP is an outdated workaround, CSRF is a security vulnerability, and HSTS is a policy for enforcing HTTPS connections.

Key points

CORS uses HTTP headers to manage permissions
Browsers enforce same-origin policy by default
Preflight requests are used for non-simple requests

Ready to go further?

Start full exam Practice more questions