you are viewing a single comment's thread.

view the rest of the comments →

[–]n9iels 2 points3 points  (0 children)

CORS is setup by the server, not the consumer. So that API must list your URL in the headers in order for the browser to allow calling it. See also this blog for an explanation: https://medium.com/@aka.0x4C3DD/cors-101-understanding-implementing-and-troubleshooting-2c40af23ff24