Security policy (browsers prohibit AJAX calls to resources outside the current origin). If a cross-origin request violates the same-origin policy and is not permitted by the server’s CORS headers, the browser blocks the request and triggers a CORS error rein JavaScript. You can also add the @CrossOrigin annotation at the https://robertog210mzl3.is-blog.com/profile