send Access-Control-Allow-Origin header only for valid origins, prevent CORS-based thievery of scripts in ~/.js
send Access-Control-Allow-Origin header only for valid origins, prevent CORS-based thievery of scripts in ~/.js

p3lim/dotjs-universal,p3lim/dotjs-universal