Chrome to bolster CSRF protections with CORS preflight checks on private network requests

Phased rollout begins from Chrome 98 with DevTools warnings of failed preflight requests

Source