It would be nice if a pattern could be specified for allowed CORS domains, instead of individual URLs.
Our use case is a development pipeline where pull requests automatically spin up preview servers. These apps have a predictable domain pattern, so it would be more convenient to specify the pattern in the CORS configuration than it is to add each preview domain individually.