AspNetCore.Docs/mvc/security/cors-policy
..
sample