Fix security issue in CORS regex

Regex should not allow for `http://adversary.com/mckinsey.com`.
Merge pull request #75 from aleemb/patch-1

Fix security issue in CORS regex