I had to do something similar when I was trying to develop an AJAX API in a NetSuite suitelet, and while testing it locally was running into CORS problems