Allow UTF-8 resources only
Introduce CORS helper (to be validated!)