Learning SOP and CORS, my understanding they are applicable only for browser JS client. It will be ignored if the client is curl or python httplib for example.
Now if I h