NodeJS cors don't filter anything

Question

I tried to follow the tutorials I found here and here. But it appears the routes are accepted no matter what:

const config = require(\'config\')
const express