Upgrade to express 4.8.5 and cors 2.4.1.

Is that the really only way to get this information? That's really complicated…