To be fair, Jody, I don't use Facebook much, less logged-in, and even, most probably in mobile version.
I didn't even dig what was that about CORS in Pale Moon. What did they exactly do? Because CORS if stands for what I know, it means the permissions for cross origin domain access policies, what is nothing that a browser can do, but target servers.
Can you post a link to that discussion