Which mechanism allows a web application to restrict which origins can access its resources?

Question

Web Development — Medium

Which mechanism allows a web application to restrict which origins can access its resources?

Accepted Answer

CORS is a browser-based security mechanism that uses HTTP headers to allow a server to explicitly define which origins are permitted to access its resources. While SOP is the default browser policy that blocks cross-origin requests, CORS is the mechanism used to selectively relax that policy. CSP is primarily used to prevent XSS attacks, and JWT is an authentication standard.