[immibis]

Of course it's possible. CORS is a way for a browser to sandbox one site from another. When you are the browser, or an extension, you don't sandbox yourself from doing things you want to do.