Q251-Q255

Mock Interview

Stale Data Debugging

A deployed page shows old content for some users. Inspect browser cache, CDN headers, validators, Vary, and service worker behavior.

Cross-Origin API

An API works in Postman but fails in the browser. Explain preflight, allowed headers, credentials, cookie settings, and server auth.

Third-Party Trust

Review whether a third-party script, iframe, or embedded editor is safe on a sensitive frontend route.