🔒CROSS-ORIGIN RESOURCE SHARING

A security mechanism that uses additional HTTP headings to inform the browser whether it should make returned data available to the client.

Our servers decide if the client is a trusted party and thus set appropriate headings. Headings tell the browser if it may provide data to the entity that wants to obtain them.

If the server decides that a request to the API is not trusted, it will send the response to the browser, which, having analysed the headings from the response, will not display the data taken from the API.