Cross origin requests are only supported. Origin заголовок. header("access-control-allow-origin:. same origin policy. cross-origin resource sharing.