Like the sibling said: CORS is the relaxation of default security features. It's even in the name: Cross-Origin Resource Sharing.