Security← Back to glossary
What is CORS?
Cross-Origin Resource Sharing is a browser security mechanism that controls cross-origin requests via HTTP headers. Servers must explicitly allow origins, methods, and headers.
Related tools
Try these DevStackIO tools for CORS:
HTTP Header ParserParse raw HTTP headers into readable name-value pairs. Use when debugging responses; for URL parts use url-parser. Input: header text ≤10MB. Returns table of headers. 100% client-side.Open tool →CSP GeneratorBuild Content-Security-Policy headers. Use for XSS hardening. Input: directive options. Returns policy string. 100% client-side.Open tool →
Related terms
About this glossary
Definitions are written in plain language and sourced from MDN Web Docs, W3C specifications, and RFCs. Related tools run 100% in your browser — no data leaves your device.
Browse all 40 terms →