@damsdev @robin if a script is running on example.com, it can hit any endpoint on example.com, it's not cross-origin. Kind of like loading React from a CDN.