Ever seen 'blocked by CORS policy'? It's the browser protecting you — even when it's annoying.
By default, JavaScript on example.com can't fetch data from api.other.com. This prevents malicious sites from stealing your data from other sites you're logged into.