Cors

# packages/headless.yaml
opendxp_headless:
    cors:
        origin_regex: false
        allow_headers:
            - 'X-OpenDxp-Api-Locale'
            - 'X-OpenDxp-Api-Site'
            - 'content-type'
            - 'authorization'
            - 'x-retry'
        expose_headers: []
        allow_origin:
            - https://my-different-allowed-domain.test