Has the CORS policy changed (responses API)?

Oh, it is a pity when you just release an app, and it stops working….
BTW: Gemini allows calls from a browser.