For security reasons, browsers will restrict cross origin HTTP requests initiated from within scripts. This is called Cross-Origin Resource Sharing (CORS), a mechanism that uses additional HTTP headers to tell a browser to let a web application running at one origin (domain) have permission to access selected resources from a server at a different origin.

Hence, you must define the domains from different origin (third-party sites) that you intend to access within your application in the app server.