CORS Origin

Definitions

1. The scheme + hostname + port combination that identifies where a web request originates from. CORS (Cross-Origin Resource Sharing) checks prevent JavaScript on one origin from accessing resources on another unless the server explicitly allows it via Access-Control-Allow-Origin headers. Origin: https://example.com:443 is the full format.

   In plain English: The website address (protocol + domain + port) that the browser uses to decide if cross-site requests are allowed.

   Example: "The API returns Access-Control-Allow-Origin: https://app.example.com — requests from any other origin are blocked by the browser."

Related Terms

• CORS
• Cookie
• CORS Preflight
• Fetch API
• Security Headers
• Ready State
• Web Crypto API
• Mitmproxy
• CodeQL