1
JavaScriptBeginner#async
A browser policy that blocks cross-origin responses unless the server sends permitting headers such as Access-Control-Allow-Origin. It is enforced by the browser, not the server, so tools like curl are unaffected.
// server response Access-Control-Allow-Origin: https://app.example.com Access-Control-Allow-Methods: GET,POST