Read the CORS tutorial (docs/tutorials/cors-is-hard-and-everyone-hates-it.md) — CSP and CORS are different mechanisms that address different problems; knowing one ...