 to confusion when configuring.</p><p>To understand this, it helps to take a step back and look at <a href=https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS>what CORS is</a> and when it should be used.
By default, browsers have restrictions on &ldquo;cross origin&rdquo; requests initiated by scripts.
This prevents, for example, a website <code>attack.example.com</code> from making a JavaScript request to <code>bank.example.com</code> and stealing a users sensitive information.</p><p>In order to allow t