ok so day two of fighting CORS. a static site on a CDN calls our own Express backend, and every request dies with a CORS error.
i've tried adding headers to my fetch call, setting mode to no-cors, and installing a browser extension that disables CORS. The extension works but obviously i can't ask users to install it. What's the actual correct setup here? i'd realy like to understand the proper way instead of hacking aruond it. pls help 馃檹