You only provided information indicating you were using Nginx.
Either way, backend EBS stuff can be a bit fiddly at times and generally spreaking the hello world example expects everything to be locally run off the rig. So doesn’t really have a CORS issue (and/or CORS is configured to allow the local host URL since CORS headers supporting naming domains)