I changed CORS but it is not reflected

The CORS (Cross-Origin Resource Sharing) checked by the Preflight request will be cached for a number of seconds fixed in the Access-Control-Max-Age, on the response header. Please make sure to check the duration, by clearing your browser cache or by manually setting the Access-Control-Max-Age to 0.

References

• CORS
• Access-Control-Max-Age