It is a protocol that allows servers to recieve request from different domains to bypass a browser security feature that restricts cross-origin HTTP requests that are initiated from scripts running in the browser (Same origin policy)
Allows a server to relax the same-origin policy.
To make cross-domain requests possible in cases where it is legitimate to do so like working on a full-stack app for Capstone. To make sure we can make safe requests form the browser so developers can get the needed data.
headers: Access-Control-Allow-Origin: https://example.com