CORS

Also written: CORS_ORIGINS, origin

The browser rule that only lets websites call your API from origins you list. Kettle & Crane's shop website has to be in `CORS_ORIGINS`.