Ben,
In my checks, these issues do not affect the public users! It appears to be mostly for our intranet users who are on the local network. If you aren't on the local network, the apps work(so far in my short term tests) Is this was everyone else is discovering? I am testing with a laptop for which I am switching between a city wireless network and a non-city wireless network. If I am on the city's network, the CORS errors appear. If I switch to the non-city wireless network, and refresh the page, the data appears.
So, our intranet users think the apps are not working but they are.
The fix to change the flag setting to "disable" appears to work but I am not sure I can talk our network admins into pushing out the "disable" option to override these new security settings to our city network users.
