A heron-pool browser app is blocked by CORS after the municipal API is imported into API Management. What should the developer add instead of documenting around the error in the developer portal?
Select an answer to reveal the explanation.
Short Explanation
CORS is a gateway policy, not a portal paint job. Add the cors policy so preflight and responses carry the right Access-Control headers for the browser app.
Full Explanation
Browsers enforce CORS; APIM addresses it with the cors policy, typically covering preflight and response headers for allowed origins. The developer portal’s appearance, Event Grid topics, and Redis middleware do not replace that inbound/preflight gateway policy after an API import.