CORS processing model

E242818

HTTP extension mechanism browser processing model web security mechanism

The CORS processing model is the set of rules and algorithms that govern how web browsers handle cross-origin HTTP requests and responses to enforce the Same-Origin Policy while allowing controlled resource sharing.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (3)

Label	Occurrences
CORS processing model canonical	1
CORS specification	1
W3C CORS specification	1

How this entity was disambiguated

This entity first appeared as the object of triple T2174756 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: CORS processing model
Context triple: [Fetch Standard, integratesWith, CORS processing model]

A. CSP
CSP is the commonly used abbreviation for the Conference of the States Parties, the main decision-making body overseeing implementation of the Chemical Weapons Convention.
B. CSP (Communicating Sequential Processes)
CSP (Communicating Sequential Processes) is a formal model for describing and analyzing concurrent systems based on independent processes that interact solely through message-passing communication.
C. Message Processing Model
The Message Processing Model is a component of the SNMP architecture that specifies how management protocol messages are generated, received, and processed within the SNMP engine.
D. RFC 7230
RFC 7230 is an IETF standard that specifies the core message syntax and routing semantics for the Hypertext Transfer Protocol (HTTP/1.1), including its use over secure transport like HTTPS.
E. MIME Sniffing Standard
The MIME Sniffing Standard is a web specification that defines how browsers should determine the media type of resources to improve interoperability and security on the web.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: CORS processing model
Target entity description: The CORS processing model is the set of rules and algorithms that govern how web browsers handle cross-origin HTTP requests and responses to enforce the Same-Origin Policy while allowing controlled resource sharing.

A. CSP
CSP is the commonly used abbreviation for the Conference of the States Parties, the main decision-making body overseeing implementation of the Chemical Weapons Convention.
B. CSP (Communicating Sequential Processes)
CSP (Communicating Sequential Processes) is a formal model for describing and analyzing concurrent systems based on independent processes that interact solely through message-passing communication.
C. Message Processing Model
The Message Processing Model is a component of the SNMP architecture that specifies how management protocol messages are generated, received, and processed within the SNMP engine.
D. RFC 7230
RFC 7230 is an IETF standard that specifies the core message syntax and routing semantics for the Hypertext Transfer Protocol (HTTP/1.1), including its use over secure transport like HTTPS.
E. MIME Sniffing Standard
The MIME Sniffing Standard is a web specification that defines how browsers should determine the media type of resources to improve interoperability and security on the web.
F. None of above. chosen

Statements (48)

Predicate	Object
instanceOf	HTTP extension mechanism ⓘ browser processing model ⓘ web security mechanism ⓘ
affects	<img> and other HTML element resource loading in some cases ⓘ Fetch API behavior ⓘ XMLHttpRequest API behavior ⓘ
allows	cross-origin resource sharing when server opts in ⓘ
appliesTo	HTTP clients implementing CORS ⓘ web browsers ⓘ
controls	caching of preflight responses ⓘ exposure of response headers to scripts ⓘ use of credentials in cross-origin requests ⓘ
definedBy	W3C ⓘ linked to: World Wide Web Consortium
definedInStandard	Cross-Origin Resource Sharing specification ⓘ linked to: CORS protocol
determines	whether a request is a simple request ⓘ whether a request requires a preflight ⓘ whether a response is made available to JavaScript ⓘ
enforces	Same-Origin Policy exceptions ⓘ
governs	cross-origin HTTP requests ⓘ cross-origin HTTP responses ⓘ
implementsPolicy	Same-Origin Policy relaxation ⓘ
includesPhase	actual request processing ⓘ credentialed request handling ⓘ preflight request handling ⓘ response filtering ⓘ simple request handling ⓘ
isImplementedBy	major web browsers ⓘ
isRelatedTo	Fetch specification ⓘ linked to: Fetch Standard Same-Origin Policy ⓘ Web security model ⓘ XMLHttpRequest specification ⓘ
prevents	unauthorized cross-origin data access ⓘ
reliesOn	Origin header value comparison ⓘ request header classification ⓘ request method classification ⓘ response header inspection ⓘ
requires	server-side CORS header configuration ⓘ
scope	HTTP over network protocols such as HTTP/1.1 and HTTP/2 ⓘ
supports	controlled resource sharing ⓘ
usesHeader	Access-Control-Allow-Credentials ⓘ Access-Control-Allow-Headers ⓘ Access-Control-Allow-Methods ⓘ Access-Control-Allow-Origin ⓘ Access-Control-Expose-Headers ⓘ Access-Control-Max-Age ⓘ Access-Control-Request-Headers ⓘ Access-Control-Request-Method ⓘ Origin ⓘ

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

Fetch Standard → integratesWith → CORS processing model ⓘ

CORS protocol → definedIn → W3C CORS specification ⓘ

linked to: CORS processing model

Access-Control-Allow-Methods → definedIn → CORS specification ⓘ