DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Express.js Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
Express.js
Why will a browser block a cross-origin API call if the server responds with `Access-Control-Allow-Origin: *` and the fetch includes `{ credentials: 'include' }`?
A
Because serverless databases reject wildcards
B
Because browser specifications forbid wildcard origins when credentials (cookies/auth headers) are sent, requiring an explicit origin domain name
C
Because HTTPS redirects are disabled under wildcards
D
Because wildcards disable JSON parsing
Check Answer