Quiz

Question 1 of 8. 0 correct, 0 incorrect.

If CORS allows only app.example.com, a script running on another server cannot call the API.