> By default, under the same origin policy, a browser won't allow requests cross origin. Cross origin requests are allowed (as long as they're simple). Reading

> By default, under the same origin policy, a browser won't allow requests cross origin. Cross origin requests are allowed (as long as they're simple). Reading the response is what's blocked.