where to put access-control-allow-origin header code example

Example: access-control-allow-origin

Access-Control-Allow-Origin: *