Yes, they have heard about cross origin restrictions. Postwoman gets around them by having an (optional) proxy that actually makes the request on the users behalf.

Whether or not you think this is a good idea is another matter, but it works.