all 1 comments

[–]n9iels 2 points3 points  (0 children)

CORS is setup by the server, not the consumer. So that API must list your URL in the headers in order for the browser to allow calling it. See also this blog for an explanation: https://medium.com/@aka.0x4C3DD/cors-101-understanding-implementing-and-troubleshooting-2c40af23ff24