Option to disable CORS

[Floppy]

From @coderofsalvation:

(docker?) configuration option to disable CORS completely, because of bug: ModelFile-uri's don't work with remote apps, even with my /usr/src/app/config/initializers/cors.rb

# always allow cors so remote XR viewers can load content 
Rails.application.config.middleware.insert_after Rack::Head, Rack::Cors do
  allow do
    origins '*'
    resource '*', headers: :any, methods: [:get, :options, :head]
  end
end

Some way to disable or customise CORS would be good. Might even be a setting in the site UI perhaps.