Scope test -> runtime for cors-plugin