> I've been reading in the last couple of days about CORS and in a lot
> of places it's mentioned as it is a "Security" feature to help the
> world from cross domain forgery.

You either misunderstood the benifits of CORS or may be you have read that in some *amateur* blogs done by developers who are more worried about *how to make it work* than *how to make it safe* (if you understand what I mean), because CORS rather makes your web application vulnerable to such attacks ([CSRF][1]) when you open  cross-origin requests from the attacker's  origin by using CORS with the following header: 

> Access-Control-Allow-Origin: *


CORS was born to lighten the restrictions of the [SOP][2] for **trusted** requests *only*. But the problems start exactly with that *trust*.


  [1]: https://www.owasp.org/index.php/CSRF
  [2]: https://tools.ietf.org/html/rfc6454