JavaScript

CORS

A browser mechanism controlling whether script may read a cross-origin response.

Why interviewers ask about it

The browser enforces it, not the server - which is why curl is unaffected and the request often runs server-side regardless. Wildcard origin plus credentials is forbidden by spec.

This term is part of the free Python Full-Stack interview preparation module - browse the full glossary for every definition.