Your JavaScript code might be sending requests to a server other than the origin executing it and the server does not signal that it allows that