CORS

CORS is a browser security mechanism that controls which web origins can access resources from a different domain. Servers declare allowed origins, methods, and headers through HTTP response headers.

CORS prevents malicious websites from making unauthorized API calls using a user's cookies, while allowing legitimate cross-origin requests for SPAs and microservice architectures.