Disabling browser security is a "brute force" fix. For long-term development, consider these safer alternatives:
open -n -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --user-data-dir="/tmp/chrome_dev_test" --disable-web-security open chrome without cors