For older insallations, you need to set up CORS requests in the web.config. Prefer to update your installation if possible; newer 2sxc versions handle this automatically.

Two changes are required::

1. Add a rewrite rule to return HTTP 200 to option requests (more about HTTP preflight requests)
2. Add customHeaders definitions to respond correctly to CORS requests