Configure CORS policy

CORS, or Cross-Origin Resource Sharing, is a browser security feature that controls how a web page from one site (like example.com) can request resources (like data or images) from another site (like api.example.org). By default, browsers block these “cross-site” requests to protect users from malicious sites quietly grabbing private data. With CORS, the site you’re calling can explicitly allow the other site to request its resources. This lets developers safely build apps that pull in content from other domains without exposing users to unexpected or harmful data exchanges.

In this exercise, we will apply a CORS policy to APIM.