However, the same-origin policy also limits legitimate use cases just like our own. Therefore, the World Wide Web Consortium (W3C) came up with the Cross-Origin Resource Sharing (CORS) specification to deal with this. The CORS specification outlines the mechanism whereby browsers and servers can communicate with each other, through a set of HTTP headers, in order to determine which cross-origin requests are allowed.
You can find the full specification at w3.org/TR/cors/.
CORS requires support from both the client (the browser) and the server. Almost all modern browsers support CORS:
You can explore more ...
