Comment by theincredulousk

not a web person - why does the original approach not have the CORS problem? Isn't it still generating the request from the same local machine?