where to run disable cors in chrome command code example

Example: run chrome without cors

$ open -a Google\ Chrome --args --disable-web-security --user-data-dir