{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

CORS Misconfiguration

Choose the best answer for: CORS risk
Options
  1. 1CORS headers prevent every cross-site attack automatically
  2. 2CORS is purely a cache hint, not a security mechanism
  3. 3Any origin with a wildcard ACAO is always safe to trust
  4. 4Access-Control-Allow-Origin: * allows any site to read responses
backendintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle