Why does my http://localhost CORS origin not work?
Chrome does not support localhost for CORS requests (a bug opened in 2010, marked WontFix in 2014). To get around this you can use a domain like localho.st (which points at 127.0.0.1 just like localhost) or start chrome with the –disable-web-security flag (assuming you’re just testing).