It would have to be on their side. I have no control over the CORS policy of an external website. Glad you got a working one!