What is an Access-Control-Allow-Origin header?

Tells the browser which origin(s) are allowed to read a cross-origin response, the core CORS header.