Bubble does not provide the ability for users to enable or customize CORS security headers, including the Access-Control-Allow-Origin header, on Bubble apps. This means you cannot directly control or customize CORS settings to restrict access to trusted domains only within Bubble's platform.
​