SM-12767 CORS policy review edits