Access to XMLHttpRequest has been blocked by CORS

The only way you can make this work here is by having the website frontend and API on the same domain. Our hosting doesn’t allow hotlinking or CORS, so splitting the API and frontend across different subdomains is not going to work here.