Allowed CORS origins (empty = no CORS; ['*'] = any origin).
['*']
final List<String> corsAllowOrigins;