Ctrl K
Frontend · Junior · Theory

What is CORS, and why does the browser block a request to an API on a different domain?

~4 min by voice

How to approach it

This checks whether the candidate understands where a CORS error comes from: the browser enforces the Same-Origin Policy, and the server can relax it through headers. It's important to distinguish 'the browser won't let JS read the response' from 'the server rejected the request'.

Have you seen this question in a real interview?
Answers0
Avg. score—
Strong—
Practiced0
Topics
Similar questionsHow does HTTP caching work in the browser? JuniorWhere do you store auth tokens in the browser, and why? How are CSRF and CORS related to that choice? SeniorA request from the frontend fails with a CORS error, but the same request works from Postman. Explain what's going on and how to fix it. Mid-level

Answer by voice

The interviewer will ask this question and listen. Think out loud and ask for a hint if you need one. When you're done, pause or tap “That's my answer”. In about a minute, your score and the points you covered show up here.

Sign in to answer

Best with headphones · ~4 min