https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[Same origin policy] in browsers prevents, by default and for security-reasons, a javascript frontend to perform a cross-origin HTTP request to a resource that has a different origin (domain, protocol, or port) from its own. The requested target can append additional HTTP headers in response, called https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS[CORS], that act like directives for the browser and change the access control policy / relax the same origin policy.
