I think you misunderstand what CORS is. Are you under the impression CORS is a way of blocking requests? It’s the other way around. Browsers prevent most types

I think you misunderstand what CORS is. Are you under the impression CORS is a way of blocking requests? It’s the other way around. Browsers prevent most types of requests that go from one hostname/port/protocol to another by default. CORS is a way for a server to tell browsers to relax these restrictions in some way. If you disable CORS, all that means is that the default browser behaviour applies, which means that more types of requests are prevented.