CORS reference rephrased