I think that's down to Twitter API themselves who do not have CORS headers hence we will face access issues via the web browser which is a shame

https://twittercommunity.com/t/will-twitter-api-support-cors-headers-soon/28276/4