I want to add CORS support to my server
enable-cors.org
enable-cors.org
And in most example it's a blanket Allow-Origin: *
It would be better to have recommended headers + value (maybe multiple for different use cases) with an explanation and then apply theses recommendations for every server.