What would you enable to allow a browser on another site to make an AJAX request to your API?
REST
HTTP
CORS
OPTIONS