The CORS Policy is applicable for XMLHttpRequests but not for the HTML form POST requests. (reference)
XMLHttpRequests
POST
I want to block CORS requests which a