add config options for testing the Origin header in cors requests

- allow_all_cors_origins - whether or not to allow all origins
- allowed_cors_origins - a list of allowed origins (used if allow_all_cors_origins is false)

winixd/core/config.h

@@ -976,7 +976,17 @@ public:
 	// if the limit is reached then the http status 503 Service Unavailable is returned
 	size_t request_queue_job_limit;
 
+	// whether or not all origins are allowed in cors requests
+	// default: false;
+	// if false then we check allowed_cors_origins table to check whether the origin is available (origin is sent in Origin header),
+	// if allow_all_cors_origins is false and allowed_cors_origins is empty then by default we do not allow cors requests
+	// (but you can still allow it in your function/controller by overriding IsCorsOriginAvailable(...) method)
+	bool allow_all_cors_origins;
 
+	// list of allowed origins in cors requests
+	// used only if allow_all_cors_origins is false
+	// default: empty
+	std::vector<std::wstring> allowed_cors_origins;
 
 
 	Config();