Collection service CORS issue

[qifeng-bai]

The new collection service prohibit CORS. SP needs to call Collection service from server end instead of client JS