Access to XMLHttpRequest at '' from origin '' has been blocked by CORS policy

It should look like so:

Notice the CORS header (access-control-allow-origin: *) in the “Response Headers” section.