CORS is always a pain in the ass.
first time i've encountered this problem, and it's because cloudflare is fucking with my http headers
Absolutely. They do this with mine too and it makes things a pain in the ass.
well, i'm here to tell you, that it may also be your VPS provider and/or ISP siccing them on your pipes i felt raped when i figured out what was going on... this is insidious