I can't understand your position well.....

But, I think there is a problem in the CORS poc, if you had "origin is not allowed" error.