title: Will CORS prevent a browser accessing an URL?
body: <p>If a activate CORS on my .NET core application, will then users be able to access a endpoint by putting an URL in their own browser (for e.g. <a href="https://example.com/api/Account/ExternalLogin?client_id" rel="nofollow noreferrer">https://example.com/api/Account/ExternalLogin?client_id</a>)? Or does CORS only preventing javascript to make requests?</p>