cors no header ‘access-control-allow-origin’ missing code example

Example: allow cross origin

Access-Control-Allow-Origin: *
Access-Control-Allow-Origin: <origin>
Access-Control-Allow-Origin: null