Cors Origin for download link

[xubmuajkub]

I want the download link limit to specified domain only.

I try to add allow cors origin to the response header but it just didn't work on media files. It works on file like m3u8. Another problem is that I cannot get the origin from the request, so I cannot check whether which origin is sending the request.