app: add cors_behavior attribute
#309
+79
−0
Draft
cors_behavior attribute
#309