also disable sending Access-Control-Allow-Origin on empty URI path, preventing leakage of default.js
also disable sending Access-Control-Allow-Origin on empty URI path, preventing leakage of default.js

p3lim/dotjs-universal,p3lim/dotjs-universal