* --web-security=no support via options.webSecurity = false