Add missing CORS headers for public frontend locally

Signed-off-by: Nicholas Tsim <nicholastsim@gmail.com>

Author: ntsim

src/GovUk.Education.ExploreEducationStatistics.Public.Data.Api/Startup.cs

@@ -221,13 +221,25 @@ public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
         app.UseResponseCaching();
         app.UseResponseCompression();
 
+        // CORS
+
+        app.UseCors(options => options
+            .WithOrigins(
+                "http://localhost:3000",
+                "http://localhost:3001",
+                "https://localhost:3000",
+                "https://localhost:3001")
+            .AllowAnyMethod()
+            .AllowAnyHeader());
+
         // Routing / endpoints
 
         app.UseRouting();
         app.UseEndpoints(builder =>
         {
             builder.MapControllers();
         });
+
         app.UseHealthChecks("/api/health");
     }