Currently project defines specific options for CORS. It would be better to enable someone to define the desired ones.