October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

CORS Errors: How to Tell Whether the Server Got Your Request

A CORS error may mean the browser withheld a response from JavaScript—not that the server never received the request. Here’s how to tell the difference and troubleshoot it.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A CORS error does not necessarily mean the browser stopped a request from reaching the server. If a preflight check fails, the browser will not send the intended preflighted request. But if a request goes out and its response fails the CORS check, the server may already have received and processed it—the browser is only preventing page JavaScript from reading the response. CORS controls browser access to cross-origin responses; it is not server-side authorization or a substitute for CSRF defenses.

What CORS controls

A web page’s origin is its scheme, host, and port. The same-origin policy limits how scripts from one origin can interact with resources from another. Cross-Origin Resource Sharing (CORS) is a browser mechanism that lets a server grant permission for a browser script to access a cross-origin response, using response headers such as Access-Control-Allow-Origin. MDN’s CORS guide explains the mechanism.

As an Amazon Associate I earn from qualifying purchases.

CORS governs whether browser JavaScript can read a response. It is not a general firewall that prevents all callers from contacting an endpoint, and a CORS error alone does not establish whether the server ran the operation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When the browser sends the request

There are two failure points that can look alike in a console message but have different consequences:

#1 Best Overall
Anker USB C to Ethernet Adapter, Portable 1 Gbps Network Hub
  • The Anker Advantage: Join the 65 million+ powered by our leading technology.
  • Instant Internet: Connect to the internet instantly from virtually any USB-C 3.0 device, and enjoy stable connection speeds of up to 1 Gbps.
  • Lightweight and Compact: The space-saving and portable design measures just over half an inch thick and weighs about the same as a AA battery.
  • Premium Build: Features a sleek aluminum exterior and braided-nylon cable to complement the design of high-end devices.
  • What You Get: PowerExpand USB-C to Gigabit Ethernet Adapter, welcome guide, 18-month worry-free warranty, and friendly customer service.
What happened What the browser does What to check
The preflight fails For a request that requires preflight, the browser sends an OPTIONS request first. If the server does not permit the requested origin, method, or headers, the browser does not send the intended request. Look for the OPTIONS request and inspect its response headers and status in developer tools.
The response fails the CORS check A request that does not require preflight can be sent without that preliminary check. If the response does not pass the browser’s CORS check, JavaScript cannot access it, although the server may already have processed the request. Check whether the actual request was sent, then consult server logs and application behavior before concluding it did not execute.

Preflight is an advance check: the browser asks whether the planned method and headers are allowed before sending that preflighted operation. Other, simpler cross-origin requests can be sent without an OPTIONS preflight, but their responses still have to pass CORS before browser JavaScript can read them. See MDN’s preflight explanation.

How to diagnose a CORS error

  1. Find the failing request. Open the browser’s developer tools, inspect the Network panel, and read the console message for the specific CORS reason. The browser does not give page JavaScript the detailed diagnostic; the console is where developers can see it. MDN documents an example message: “Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at [some site]”. See MDN’s CORS error guide.
  2. Check whether there was a preflight. Look for an OPTIONS request before the intended request. Inspect whether the response permits the origin, method, and headers the browser requested.
  3. Establish whether the actual request went out. If it did, use server logs and the endpoint’s behavior to determine whether it was processed. A response-access error is not proof of non-execution.
  4. If you control the endpoint, narrow its CORS policy. Configure only the origins and resources that need browser access. MDN recommends specifying the minimum necessary origins and resources. See the Access-Control-Allow-Origin guidance.
  5. If you do not control the remote server, consider a controlled proxy. A server you control can make the remote request and return data to your application, but the proxy becomes a server-side dependency and needs appropriate access controls. MDN discusses proxying as an option for external CORS restrictions.

Credentialed requests need an explicit origin

For a browser to expose a credentialed cross-origin response, the server must explicitly allow the requesting origin and return Access-Control-Allow-Credentials: true. It cannot use Access-Control-Allow-Origin: * for credentialed access. These are browser access requirements; they do not establish that the application has correctly authenticated the caller or authorized the operation. MDN documents credentialed CORS requests.

Rank #2
Sale
UGREEN USB C to Ethernet Adapter, Plug and Play 1Gbps Aluminum Adapter
  • USB-C Meets 1000Mbps Ethernet in Seconds:UGREEN usb c to ethernet adapter supports fast speeds up to 1000Mbps and is backward compatible with 100/10Mbps network. Perfect for work, gaming, streaming, or downloading with a stable, reliable wired connection
  • Extend a Ethernet Port for Your Device:This ethernet to usb c adds a Gigabit RJ45 port to your device. It’s the perfect solution for new laptops without built-in Ethernet, devices with damaged LAN ports, or when WiFi is unavailable or unstable
  • Plug and Play: This Ethernet adapter is driver-free for Windows 11/10/8.1/8, macOS, Chrome OS, and Android. Drivers are required for Windows XP/7/Vista and Linux, and can be easily installed using our instructions. LED indicator shows status at a glance
  • Small Adapter, Big Attention to Detail: The usb c to ethernet features a durable aluminum alloy case for faster heat dissipation than plastic. Its reinforced cable tail and wear-resistant port ensure long-lasting durability. Compact size and easy to carry
  • Widely Compatible: The usbc to ethernet adapter is compatible with most laptops, tablets, smartphones, Nintendo Switch, and Steam Deck with USB-C or Thunderbolt 4/3 port, like MacBook Pro/Air, XPS, iPhone 17/16/15 Pro/Pro Max, Mac Mini, Chromebook, iPad

Why CORS is not authorization or CSRF protection

CORS decides whether browser scripts may access cross-origin responses. It does not replace server-side authentication, authorization checks for each operation, or defenses against cross-site request forgery (CSRF). The server must enforce who can perform an operation; response-sharing headers are not that enforcement. MDN’s same-origin policy guidance discusses protections such as unguessable CSRF tokens for preventing cross-origin writes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why no-cors usually does not fix an API error

Setting mode: "no-cors" does not make a blocked API response readable. It produces an opaque response: JavaScript cannot inspect its status, headers, or body. Use it only when an opaque response is acceptable, not as a way to retrieve data the server has not made available to browser scripts. MDN’s CORS error guidance describes this limitation.

Rank #3
Amazon Basics Aluminum USB-C to RJ45 Gigabit Ethernet Adapter, Portable, Fast Network, Grey, 2.07 x 0.81 x 0.6 inches
  • Adapter for converting a USB 3.1 Type-C port to a RJ45 Gigabit Ethernet port
  • Integrated Ethernet port supports 10M/100M/1000M bandwidth; offers instant Internet connection to the host
  • USB-C input allows for reversible plugging; offers complete compatibility with current computers and devices; compatible with Nintendo Switch
  • Ready to use, right out of the box; no external power adapter needed
  • Slim, compact size and lightweight aluminum housing for easy portability
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Can you avoid a preflight?

Some requests can be structured so they meet the browser’s conditions for avoiding preflight, including use of a permitted method, safelisted headers, and an eligible content type. That is appropriate only if the intended operation can validly use those choices. Avoiding preflight does not make a response readable when the server’s CORS policy does not permit access.

Quick Recap

Bestseller No. 1
Anker USB C to Ethernet Adapter, Portable 1 Gbps Network Hub
Anker USB C to Ethernet Adapter, Portable 1 Gbps Network Hub
The Anker Advantage: Join the 65 million+ powered by our leading technology.
$25.99
Bestseller No. 3
Amazon Basics Aluminum USB-C to RJ45 Gigabit Ethernet Adapter, Portable, Fast Network, Grey, 2.07 x 0.81 x 0.6 inches
Amazon Basics Aluminum USB-C to RJ45 Gigabit Ethernet Adapter, Portable, Fast Network, Grey, 2.07 x 0.81 x 0.6 inches
Adapter for converting a USB 3.1 Type-C port to a RJ45 Gigabit Ethernet port; Ready to use, right out of the box; no external power adapter needed
$23.99
Best Value
Sale
uni USB C to Ethernet Adapter 1Gbps, Driver Free RJ45 to USB C for Laptop
  • 【1Gbps LAN to USB-C Adapter】Obtain stable connection speeds up to 1Gbps; downward compatible with 100Mbps/10Mbps networks. Our Type-C to LAN Gigabit Ethernet (RJ45) Network Adapter supports large downloads at maximum speeds without interruption. (To reach 1Gbps, make sure to use CAT6 & up Ethernet cables.)
  • 【Reliable & Endurance Connectivity】Designed specifically for plug-and-play connection between USB-C devices and wired network, provides gigabit ethernet connectivity even when wireless connectivity is Inconsistent or over extended.
  • 【Thoughtful Design】Compact and lightweight, with a user-friendly non-slip design for easier plugging and unplugging. Braided nylon cable for extra durability. Premium aluminum casing for better heat dissipation. High-quality USB-C connector provides snug connection with your devices for stable signal transfer. Design to make it easy to connect USB peripherals without blocking adjacent USB-C ports
  • 【Wide Compatibility】Compatible with iPhone 15/16 Pro/Max, MacBook Pro 16''/15” (2023/2022/2021/2020/2019/2018/2017), MacBook (2019/2018/2017), MacBook Air 13” (2022/2018), iPad Pro (2022/2020/2018); XPS 13/15/17; Surface Book 2; Google Pixelbook, Chromebook, Pixel, Pixel 2; Asus ZenBook. Compatible with Samsung S20/S10/S9/S8/S8+, Note 8/9, Galaxy Tablet Tab A 10.5, and many other USB-C laptops, tablets, and smartphones. (NOT compatible with Nintendo Switch.)
  • 【What You Get】 USB C to Ethernet Adapter 1 pack, An effortless 18-month 𝗐𝖺𝗋𝗋𝖺𝗇𝗍𝗒 and 24/7 professional customer service. If you have any questions, don't hesitate to get in touch with us, we solve most issues within 12 hours. Please rest assured we stand behind our products and customers.
Rank #4
Sale
TP-Link USB C to Ethernet Adapter (UE300C), Compact, Plug & Play
  • 𝐇𝐢𝐠𝐡-𝐒𝐩𝐞𝐞𝐝 𝐔𝐒𝐁-𝐂 𝐄𝐭𝐡𝐞𝐫𝐧𝐞𝐭 𝐀𝐝𝐚𝐩𝐭𝐞𝐫 - Instantly transform your laptop or tablet’s USB-C port into a reliable wired connection with a 10/100/1000 Mbps RJ45 Ethernet port. Perfect for replacing unstable Wi-Fi in situations that require uninterrupted connectivity, such as online meetings, gaming, and media streaming.
  • 𝐔𝐒𝐁-𝐂 𝟑.𝟎 𝐟𝐨𝐫 𝐅𝐚𝐬𝐭𝐞𝐫, 𝐌𝐨𝐫𝐞 𝐒𝐭𝐚𝐛𝐥𝐞 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧𝐬 - Experience full Gigabit Ethernet performance over your laptop’s USB-C 3.0 port and elevate your browsing experience to transfer files, play games, video chat, and stream HD videos seamlessly. (To reach 1Gbps, please use CAT6 or up Ethernet cables.)
  • 𝐔𝐥𝐭𝐫𝐚-𝐂𝐨𝐦𝐩𝐚𝐜𝐭 𝐚𝐧𝐝 𝐅𝐨𝐥𝐝𝐚𝐛𝐥𝐞 𝐃𝐞𝐬𝐢𝐠𝐧 - At just 2.8 x 1.0 x 0.6 inches, the UE300C slips easily into your laptop bag or pocket. The lightweight yet durable build makes it perfect for travel, remote work, or quick setup in conference rooms.
  • 𝐏𝐥𝐮𝐠 𝐚𝐧𝐝 𝐏𝐥𝐚𝐲- No driver required for Windows 11/10/8.1/8/7, macOS, Chrome OS, and Linux (Ubuntu). Simply connect and enjoy instant wired internet access without complicated setup.
  • 𝐁𝐫𝐨𝐚𝐝 𝐃𝐞𝐯𝐢𝐜𝐞 𝐂𝐨𝐦𝐩𝐚𝐭𝐢𝐛𝐢𝐥𝐢𝐭𝐲- Works seamlessly with most USB-C devices, including MacBook Pro/Air, iPad Pro, Dell XPS, Surface Laptop, Chromebook, and more—making it a versatile network upgrade for home, office, or on-the-go use.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.