Short-circuit in CORS to temporarily bypass logic bug.