400 Bad Request when sending XHR from React.js to admin-ajax.php

Solved by adding an action to handle unauthenticated users:

add_action('wp_ajax_nopriv_xhrLink', 'handleXhrLink');