Therefore Web API > Developers Guide
CORS. Cross-Origin Resource Sharing
The JSON/XML endpoints of the Web API can be configured for HTTP access control (CORS).