Cross-Origin Resource Sharing (CORS) allows AJAX requests to an API (endpoint) from a browser. Specific origin hosts can be set or all AJAX requests can be allowed.
If you want to allow specific hosts to make AJAX requests to you specify hosts (specific URLs) separated by commas. To allow any host to send requests to an endpoint, use the star (*) wildcard.
From the Home menu, select API Publishing.
In the Settings section, enable CORS by setting the slider to On.
Enter host URLs in the Allowed Origin Hosts field. Remember to separate each host address by a comma. Use the * wildcard to allow all hosts.
Click Update CORS settings.