CORS policy problem: Access-Control-Allow-Origin

[sunnyson]

In security you have:

cors": {
    "enabled": false,
    "headers": "*"
  },

It should be enabled