The web version of APIC (API testing module) suffers with the limitation of CORS where browsers don't allow access to resources of other domains unless the response contains Access-Control-Allow-Origin header with a value of "*" or "https://apic.app" (without the quotes). To overcome this issue you need to install this extension that will allow APIC to access resources on other domains by adding Access-Control-Allow-Origin: * header.