Doesn't really let you control what domains to use or not use CORS on, whitelist acts as a blacklist as opposed to "whitelist". Kind of disappointing how the creator failed to implement a basic feature.