This guide helps you set up the Access-Control-Allow-Origin header, an HTTP header that specifies which origin (domain, protocol, and port) can access resources on a server. This header is used to control cross-origin (CORS) access from a web application.

List of authorized domains

You can add the origin of a request to the list of domains authorized to access the server's resources by adding it to the values of the Access-Control-Allow-Origin header.

To allow, for example, the site https://domain.xyz to access resources using CORS, the header should be as follows:

Access-Control-Allow-Origin: {{URL_1}}

You can configure it using the header() function in PHP, and you can refer to this guide for more information.

If you need this header to be applied everywhere, you can use an auto-prepend.