Generate your Content Security Policy
Set Access-Control-Allow-Origin (CORS) headers in Apache vhost or htaccess
All Origins
Hacking It Out: When CORS won’t let you be great
This API is so Fetching! - Mozilla Hacks - the Web developer blog
Cors proxies