I had to add a .toml file with Access-Control-Allow-Origin to make CORS work.

[[headers]]
# Define which paths this specific [[headers]] block will cover. for = "/”
[headers.values]
Access-Control-Allow-Origin = "”