The backend only sends headers. The browser decides whether the response can be exposed to JavaScript. So if one machine fails and another does not, I would not start with “the backend CORS config is ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results