<CORS name="CORS-1" enabled="true">
    <!--    <AllowOrigins>{request.header.origin}</AllowOrigins> -->
    <AllowOrigins>*</AllowOrigins>
    <AllowMethods>GET, POST, DELETE</AllowMethods>
    <AllowHeaders>origin, x-requested-with, content-type</AllowHeaders>
    <ExposeHeaders>*</ExposeHeaders>
    <MaxAge>180</MaxAge>
    <AllowCredentials>false</AllowCredentials>
    <GeneratePreflightResponse>true</GeneratePreflightResponse>
    <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
</CORS>
