Send a null Access-Control-Allowed-Origin for filesystem requests