app: add cors_behavior
attribute
#309
+79
−0
Draft
cors_behavior
attribute
#309