A setting that disables CORS, preventing web applications from making cross-origin requests to a different domain.