How to Answer: How does CORS work?
Advice and answer examples written specifically for a Web Architect job interview.
2. How does CORS work?
Why the Interviewer Asks This Question
Cross-origin resource sharing, or CORS, is a key operational component of websites. Interviewers will ask you about this and other technologies to confirm that you have an in-depth knowledge of website architectures and can incorporate these technologies into your designs. They are likely to ask many technical questions like this throughout the interview.
Written by William Swansen on March 4th, 2022
How to Answer
Since this is a technical question, you need to keep your answer brief and to the point. Elaborating on the answer or providing too much information could actually work against you. The interviewer may begin to lose interest in your response, or worse, you may give them information that will enable them to proceed in a different direction in which you may not be as knowledgeable. The interviewer can always ask a follow-up question if they need additional information.
Written by William Swansen on March 4th, 2022
1st Answer Example
"CORS, which stands for cross-origin resource sharing, allows resources on a web page to request resources from another domain outside the domain from which the resource was originally obtained. These resources can include cross-origin images, stylesheets, scripts, iframes, and videos. CORS defines how a browser and server can interact to determine whether it is safe to allow the cross-origin request. Some cross-domain requests may be blocked if the website has a same-origin security policy."
Written by William Swansen on March 4th, 2022
2nd Answer Example
"CORS, which stands for cross-origin resource sharing, allows resources on a web page to request resources from another domain outside the domain from which the resource was originally obtained. These resources can include cross-origin images, stylesheets, scripts, iframes, and videos. CORS defines how a browser and server can interact to determine whether it is safe to allow the cross-origin request. Some cross-domain requests may be blocked if the website has a same-origin security policy."
Written by William Swansen on March 4th, 2022