CORS (Cross-Origin Resource Sharing) is a browser mechanism that controls requests from a page to another origin. The server allows specific origins through headers such as Access-Control-Allow-Origin. It is not server-side protection: it only restricts browsers.
Example
Access-Control-Allow-Origin: https://app.exemple.fr