CORS extension (issue #23)