No CORS policy defined

Same-Origin
Broken Domain
Broken Protocol
Broken Port
Bad Wildcard

Access-Control-Allow-Origin defined

Domain Specific
Same-Origin with domain defined
Wildcard

Preflight request

Same Origin
Different Origin - Wildcard
Same Origin - Working Preflight
Different Origin - Working Preflight

Post behavior

Working Version
Pseudo Broken Version