I definitely understand CORS in theory, then when it's time to solve a CORS related error, anything goes. /s