I don't think the act of sending the POST is blocked by CORS, receiving the POSTed response data is though.