2 ms·CORS is strictly browser-side enforced, so yes - any app can make this query and scrape the response.by Groxx 9y agoCORS is strictly browser-side enforced, so yes - any app can make this query and scrape the response.