Answer
Browsers enforce CORS. Servers must send headers allowing specific origins.
Quick Answer
Browsers enforce Same-Origin Policy — your page at domain-a.com can't fetch from domain-b.com without server permission. CORS (Cross-Origin Resource Sharing) headers on the server grant permission: Access-Control-Allow-Origin: * (or specific domain). Preflight OPTIONS requests check permissions for non-simple requests. You can't bypass CORS from the browser — the server must allow it.
S
SugharaIQ Editorial Team
Verified Answer
This answer has been peer-reviewed by industry experts holding senior engineering roles to ensure technical accuracy and relevance for modern interview standards.
Want to bookmark, take notes, or join discussions?
Sign in to access all features and personalize your learning experience.
Source: SugharaIQ