added cors support for the express server

[BenjaminDobler]

While writing a simple test client i noticed that cors support is missing in the express app...

[wzr1337]

Thanks!

I missed that :)

Let's add some configuration file, where we can read CORS Filter configuration from. Adding it without explicit whitelisting feels like an open door..

I'd also be ok with a command line option for know

[wzr1337]

resloved with ea5208a

[codeundkakao]

I think this issue is not fully resolved yet. The 'corsOpts' object is never actually passed on to cors at the moment. This leaves the server open to access from all domains while missing to expose the 'Location' header. Additionally whitelisting with something like '127.0.0.1' would not work as a request's origin header also contains the protocol (e.g. http://) and optionally a port, which then need to be in the response as well.

This should be re-opened and revised.