CORS error with Management API (content updates via an Axios app)

Hello - we are experiencing a CORS error when making a Management API POST to the Knowledge Graph (Note: the update is via Axios in a JavaScript client app running on localhost) to a Yext Sandbox account (using the new sbx api URL).

Is this expected and/or does Yext offer flexibility to manage cross-origin CORS settings on Sandbox and Production environments using the Management API?