CORS Explained: Why the Browser Blocks Your Request
The console names CORS as the thing that stopped you, when CORS is the mechanism that would have let you through. What makes a request plain enough to skip the preflight, why posting JSON never is, which wildcards credentials take away, and why none of it constrains a script running outside a browser.
Read →