You should serve the LNURL endpoints with CORS headers, so that Web clients can fetch invoices.