CORS
Cross-Origin Resource Sharing
A browser security mechanism that allows or restricts web applications from making requests to a domain different from the one serving the page. Salesforce admins configure CORS allowlists in Setup.
Example use case
An admin adds a custom web app's domain to the Salesforce CORS allowlist so it can make JavaScript API calls to the Salesforce org.