I'm using ArcGIS Online in conjunction with WebAppBuilder developer edition, and would like to use a CORS policy to restrict data access . Right now, when I set up a restriction, it blocks me from accessing the data through WebAppBuilder developer edition on the machine where I build the apps. The CORS settings in AGOL don't seem to allow me to add the machine, since it's not a valid domain.
Is there a way to set up CORS restrictions so as to allow for developer machine access, or do I need to turn the restrictions off every time I edit the apps and then back on again after I publish them?