Setup Cross-Origin Resource Sharing (CORS)

[Jagster (Jakke Flemming)]

And if Google ads are in use perhaps it is better to keep hands off from this setting

CORS (and CSP) is a bit problematic because quite often a site must allow de facto everything and then it is close to useless.