Which mechanism allows a web application to restrict which origins can access its resources?

Explanation

CORS is a browser-based security mechanism that uses HTTP headers to allow a server to explicitly define which origins are permitted to access its resources. While SOP is the default browser policy that blocks cross-origin requests, CORS is the mechanism used to selectively relax that policy. CSP is primarily used to prevent XSS attacks, and JWT is an authentication standard.

Key points

CORS uses HTTP headers like Access-Control-Allow-Origin
SOP is the default restriction
CORS enables controlled cross-origin access

Ready to go further?

Start full exam Practice more questions