Because the Single Origin Policy is a client side security measure. It's to protect the user from random malicious JS out on the web. If you are writing server

Because the Single Origin Policy is a client side security measure. It's to protect the user from random malicious JS out on the web. If you are writing server side code you're outside the scope of who the security model is trying to protect.