move cors into common config Upstream-commit: 28b7dc51aec6a237af187badfc1953eb9dbbb142 Component: engine