I have not had to set up anything related to the CORS for this. However, if you do not have the domain name set up in the Cloudflare Turnstile dashboard, then this could throw this error. See https://community.cloudflare.com/t/cors-problem-https-challenges-cloudflare-com-turnstile-v0-siteverify/509618 for more information