EZP-22048: Fixed HTTP CORS headers