It might make more sense to have the prefix of these be CORS instead of XS