Chrome浏览器不会阻止来源不匹配的商品[重复]
This question already has answers here:
CORS allowed-origin restrictions aren’t causing the server to reject requests
...