Selectively enable CORS only for specific URLs

I prefer not to enable CORS site-wide, but only for a few URLs. So I added a new setting that allows you to specify the URLs at which CORS is to kick in (regexp based).