Configuring cors during development

In development I'm serving a JS app from a pages project and a local dev worker. since these are on different ports there's a XSS issue. I've configured CORS and can make the appropriate requests, but I can't access cookies returned from the worker in the JS frontend. I'm trying to establish a session cookie that is passed between subsequent POST requests from the frontend.