CORS and an index