What is CORS?
Also called: Cross-Origin Resource Sharing
The short answer
CORS is the browser rule that controls whether a page on one domain may request data from another domain, enforced through response headers the server sends.
What people say: “blocked by CORS policy”.
CORS, explained
A CORS error means the server did not allow your site's origin; the fix belongs on the server, not in the browser.
Questions people ask about CORS
What is CORS?
CORS is the browser rule that controls whether a page on one domain may request data from another domain, enforced through response headers the server sends.
Related terms
An API is a defined way for one piece of software to ask another for data or actions, such as a site asking a payment service to charge a card.
Content Security PolicyA Content Security Policy is a response header that tells the browser which sources of scripts, styles, images and frames a page may load, blocking injected code.
Website securityWebsite security is protecting a site, its data and its visitors from attacks, through HTTPS, updated software, careful input handling, strong logins and backups.
Cross-site scriptingCross-site scripting is an attack where malicious code is injected into a page and runs in other visitors' browsers, stealing sessions or data.
Part of the Web Encyclopedia by Apex Flow Digital. Definitions are general knowledge, kept current, with no invented statistics.