Convert CorsFallback from a php to ctp and move to a view. Bugfix html escaping in cors_fallback for german error strings.