[icedchai]

Yes, CORS is best avoided when your own back end is the "third party." (In some cases, it may be impossible though.)