Added a Permissive CORS transformer