By flexible, I mean flexible by server, i.e. I can write a server with CORS support, and you can write a server without CORS support if you want: we will just have different filter chains but that's ok.
I don't see the need to dynamically change the filter chain, do you ?