← Back to glossary

🌐

CORS

Web Security

HTTPS CSRF (Cross‑Site Request Forgery) Access Control API Key

A browser safety rule about which websites can call an API.

Definition

CORS is a browser rule that controls whether one website is allowed to request data from another website’s API.

In plain English A browser safety rule about which websites can call an API.

Why this matters

Why it matters: Misconfigured CORS can expose private data to the wrong websites.

Example

Example: An API only allows requests from https://example.com, not from any site.