Drop automatic CORS code.
Drop the special behavior for data urls, it is now the same as for normal URLs