security: restrict CORS to explicit allowed origins#706

lane711 merged 3 commits intomainSonicJs-Org/sonicjs:mainfrom

merge-pr-661-corsSonicJs-Org/sonicjs:merge-pr-661-corsCopy head branch name to clipboard