Allow setting of CORS attribute