In general, if we have a single page app on a different domain, do we need any CORS configuration in order to submit data form the app to the JSSP?
If so can I just accept headers from that domain in the JSSP or does that need to be configured somewhere else?
Cores can be enabled on the server by changing the server config file i.e
<responseHeader name="" value="*.domain name"/>
You have to submit a request to Adobe Support to get it enabled for hosted customer.