easy5 pts · first answer countshttpweb-security

Browser blocks a call that curl allows

A frontend on https://app.example.com calls https://api.example.com. The browser console shows a CORS error, but the same request works with curl. What is the most likely cause?

A.The API server checks the User-Agent header and rejects every request that comes from a browserB.curl uses HTTP/1.1, which the API supports better than HTTP/2C.The response lacks CORS headers such as Access-Control-Allow-Origin, so the browser hides itD.The browser needs a CSRF token that curl does not need

Discussion 0

Join free to post in the discussion.

Browser blocks a call that curl allows

Discussion 0

Related questions