CORS

medium

A browser blocks a page on a.com from reading a response from api.b.com. What lets it through?

Your answer

A header on the pageapi.b.com sending Access-Control-Allow-Origin for a.comUsing POST instead of GETHTTPS on a.com only

Open hints one at a time. The write-up explains a full solution.

Ask a question or share a tip. Please don’t post full solutions. Posts appear once a moderator approves them.

No posts yet.

Your name (shown with the post)

Your post