This is the configuration that the CORS handler will follow. Its default configuration is basically
not to touch any responses, resulting in the browser’s default behaviour.
Specify the allowed origins of the request. It is up to the browser to check the validity of the
origin. This, when sent to the browser, will indicate whether or not the request’s origin was
allowed to make the request.