@cinebox CORS is profoundly stupid. My trick is for page to call its own server which curls the URL it needs from a 3rd-party server. This is fine! Doing it in the page is not! It's no safer.