Allowing all origins for CORS will certainly work, but it opens your site up to potential security vulnerabilities. I'd suggest reading the second answer on that same question for more detail: https://stackoverflow.com/a/62458772