app.example.com
can trust content from the same origin (e.g., app.example.com/api/v1/resource
), and that the API can trust requests from that page. bucket-cors.json
, with the following content:http-server
package, since it comes with full CORS support out of the box. To serve a directory on port 5000, you can run the following command: