{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

CORS configuration

Choose the best answer for: cross-origin safety
Options
  1. 1Allow * and credentials together in the CORS configuration
  2. 2No CORS configuration, which fails legitimate cross-origin requests
  3. 3Allow all origins and echo any origin back to the browser
  4. 4Whitelist specific origins; never use * with credentials
fullstackintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle