What is the same-origin policy, and how does CORS work, including preflight requests?

The answer

Answer it out loud first, the way you would in the interview. Then compare.

Checking your sign-in…