3 ms·CORS is to _allow_ cross-origin requests, not to restrict them. Most such requests are restricted by default.by Ajedi32 9y agoCORS is to _allow_ cross-origin requests, not to restrict them. Most such requests are restricted by default.