update CORS sample (ro/bv)