Procedure continue running even access control checking failed

[hyurl]

I found a problem in this module, it says when CORS checking failed, return next(), which is absolutely a mistake. The program will continue running and affect the website and data, although the remote user will never know it. Instead of returning next(), the module should terminate the connection immediately. Hope this advice helps.