Is not allowed access controlled. Access-control-allow-origin. xss код. schema access-control-allow-origin. when send access-control-allow-headers.