Our application mashup fails with below reason when it tries to access the mashup script. Access to script at '<Pega mashup URL>' from origin '<URL of the application where mashup is embedded>' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.  

Solution to the above issue seems to be adding below response header to the pega mashup URL. But not sure how this can be added/configured

• Access-Control-Allow-Origin: <HostDomain>

I have noticed that the same question was asked earlier, but couldnt see an answer. Would really appreciate any help. Thank you https://collaborate.pega.com/question/how-add-cors-header-mashups