aspnet core configuration takes an array of strings, which would enable us to keep one set of parameters to handle CORS. https://github.com/aspnet/CORS/blob/f05b0e792d2361be214947798857ef3eac77825d/src/Microsoft.AspNetCore.Cors/Infrastructure/CorsPolicyBuilder.cs#L55